...
App service authentication must be turned on
Login with Azure Active Directory must be enabled for unauthenticated requests to the App service
Azure Active Directory must be selected as the Identity Provider
Information about the Web application (service principal) you Register an application for EmpowerID in Azure AD must be added to the Azure App service
...
...
...
...
...
Under Action to take when request is not authenticated, select Log in with Azure Active Directory.
...
Under Authentication Providers, click Azure Active Directory.
...
...
...
Enter the following information for the Advanced mode settings:
...
Client ID — Enter the Client ID for the registered earlier for EmpowerID.
...
Issuer Url — Enter https://login.microsoftonline.com/<TenantID>, where <TenantID> is the TenantID of the application you registered in Azure AD for EmpowerID.
...
Client Secret — Enter the client secret for the application you registered in Azure AD for EmpowerID.
...
...
Click OK to close the Active Directory Authentication dialog.
Back in the main Authentication / Authorization page, click Save.
...
select Express > Select Existing AD App and then click Azure AD App.
Search for and select the IT Shop back-end application and then click OK.
Click OK on the main Azure Active Directory Settings page.
Click Save to save the new App Auth settings.
Back in the Overview page for the App Service, click Get Publish Profile. You will need this file when you Publish the IT Shop Microservice to Azure in ALM.
To configure the IT Shop API App Service
In Azure, navigate to the App Service.
Under Settings in the navbar, select Authentication / Authorization.
Turn on App Service Authentication.
Under Action to take when request is not authenticated, select Log in with Azure Active Directory.
Under Authentication Providers, click Azure Active Directory.
For Management mode, select Express > Select Existing AD App and then click Azure AD App.
Search for and select the IT Shop back-end application and then click OK.
Click OK on the main Azure Active Directory Settings page.
Click Save to save the new App Auth settings.
Under API in the navbar, select CORS.
Select Enable Access-Control-Allow-Credentials.
In the Allowed Origins field, enter the URL for the IT Shop UI (front-end) service application. The URL should look similar to
https://it-shop-ui.azurewebsites.net, whereit-shop-ui.azurewebsites.netis the URL to your app service.Click Save to save the updated settings.
Under Settings in the navbar, select Configuration.
On the Application settings tab, click New application setting.
In the Add/Edit application setting modal, enter EID_Base_Url in the Name field and the base URL of your EmpowerID server, such as
https://sso.empoweriam.comin the Value field.Click OK.
Repeat steps 14, 15 and 16, adding the following additional application settings:
Insert excerpt IL:IT Shop API App Service Application Settings IL:IT Shop API App Service Application Settings nopanel true When finished adding the above required settings, click Save and then Continue.
Back in the Overview page for the App Service, click Get Publish Profile. You will need this file when you
...
...
...
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|