Configure the App Services for the IT Shop Microservice

The IT Shop microservices interface with Azure License Manager to allow users to shop for licenses in Azure License Manager.

To configure the IT Shop UI App Service

1. Log in to your Azure portal as a user with the necessary permissions to configure the IT Shop App services you earlier.

2. In Azure, navigate to the App Service.

3. Under Settings in the navbar, select Authentication / Authorization.

4. Turn on App Service Authentication.

   

5. Under Action to take when request is not authenticated, select Log in with Azure Active Directory.

   

6. Under Authentication Providers, click Azure Active Directory.

   

7. For Management mode, select Express > Select Existing AD App and then click Azure AD App.

   

8. Search for and select the IT Shop back-end application and then click OK.

   

9. Click OK on the main Azure Active Directory Settings page.

   

10. Click Save to save the new App Auth settings.

    

    
    

11. Back in the Overview page for the App Service, click Get Publish Profile. You will need this file when you Publish the IT Shop Microservice to Azure in ALM.

    

To configure the IT Shop API App Service

1. In Azure, navigate to the App Service.

2. Under Settings in the navbar, select Authentication / Authorization.

3. Turn on App Service Authentication.

4. Under Action to take when request is not authenticated, select Log in with Azure Active Directory.

5. Under Authentication Providers, click Azure Active Directory.

6. For Management mode, select Express > Select Existing AD App and then click Azure AD App.

7. Search for and select the IT Shop back-end application and then click OK.

8. Click OK on the main Azure Active Directory Settings page.

9. Click Save to save the new App Auth settings.

10. Under API in the navbar, select CORS.

11. Select Enable Access-Control-Allow-Credentials.

12. In the Allowed Origins field, enter the URL for the IT Shop UI (front-end) service application. The URL should look similar to https://it-shop-ui.azurewebsites.net, where it-shop-ui.azurewebsites.net is the URL to your app service.

13. Click Save to save the updated settings.

    

14. Under Settings in the navbar, select Configuration.

15. On the Application settings tab, click New application setting.

    

16. In the Add/Edit application setting modal, enter EID_Base_Url in the Name field and the base URL of your EmpowerID server, such as https://sso.empoweriam.com in the Value field.

17. Click OK.

    

18. Repeat steps 14, 15 and 16, adding the following additional application settings:
    

    Application Setting
    Name	Value	Required
    ITShop_UI_Url	Base URL of the front-end app service	Required
    MongoConnectionSettings__Host	HOST setting for the IT Shop database app, such as it-shop-db.mongo.cosmos.azure.com	Required
    MongoConnectionSettings__Port	PORT setting for the IT Shop database app, such as 10255	Required
    MongoConnectionSettings__Auth_User	USERNAME setting for the IT Shop database app, such as it-shop-db	Required
    MongoConnectionSettings__Auth_Password	PRIMARY PASSWORD for the IT Shop database app	Required
    MongoConnectionSettings__UseSSL	true	Required
    MongoConnectionSettings__Timeout	Connection timeout value in seconds (default value is 5 seconds)	Required
    EidSettingsOptions__RootApplicationComponentId	Registered ITSHOP application guid	Required
    EidSettingsOptions__RootBusinessProcessId	Root location GUID for Business Processes list out (Business Roles)	Required
    EidSettingsOptions__RootDomainId	Root location GUID for Domains list out (Application Roles)	Required
    TokenValidationDisabled	true	Required
    EID_Base_Url	EID Url	Required
    ASPNETCORE_ENVIRONMENT	Production	Required

19. When finished adding the above required settings, click Save and then Continue.

    

20. Back in the Overview page for the App Service, click Get Publish Profile. You will need this file when you Publish the IT Shop Microservice to Azure in ALM.