Azure Active Directory, IDX10500: Signature validation failed - azure

I'm attempting to run this sample to authenticate with Azure Active Directory:
https://github.com/Azure-Samples/active-directory-dotnet-webapp-openidconnect
I authenticate fine, and am redirected to my sample site, and then receive this error:
IDX10500: Signature validation failed. Unable to resolve
SecurityKeyIdentifier
I've researched and don't understand what I need to do on my end with this sample to get this running.
Any help would be appreciated!

I hope this helps someone else out, but after getting with a Microsoft support guy and with our Azure administrator, it turned out the app registration was created with SAML instead of OAUTH2 authentication.
Our admin had to delete the app registration in Azure and recreate it with the proper authentication method. As an Azure user and not an admin, there's nothing in there for me to look at to realize this was the issue.

Related

Keycloak integration with Azure AD

I am having problems integrating Keycloak and Azure AD for authenticating access to a Web App.
I followed the instructions here, however at the stage of adding the Application ID URI we get this error:
Could someone explain what the issue might be? Is the verified domain of the Azure Organization, or Keycloak?
Thanks in advance.
Looks like my issue is due to this MS change.
Fix is to add a 'Custom Domain', https://azure.github.io/AppService/2020/07/28/zero_to_hero_pt5.html.

SonarQube Azure AD Integration

I have a Sonarqube hosted VM in Azure, I tried to integrate with AAD, created the App Registration and given all the details like client ID, Tenant ID, etc. Unfortunately the Sonarqube is hosted without SSL, So i changed the URL from General Settings. But still i'm getting the error "You're not authorized to access this page. Please contact the administrator."
I would suggest checking the limitations for Redirect URIs for Azure AD App Registrations listed here: https://learn.microsoft.com/en-us/azure/active-directory/develop/reply-url
Also make sure the app registration is done correctly. You can follow the steps mentioned here: https://learn.microsoft.com/en-us/graph/auth-register-app-v2
In case the details shared above doesn't help in fixing the authorization error, we would like to understand the actual error code AAD is throwing to SonarCube along with the correlationID and timestamp so that we can check some backend logs based on those.

Flutter Login using Azure Active directory

I am using Flutter for our Mobile application. and I am having trouble with Login user and get Auth token.
I have tried https://medium.com/flutter-community/flutter-azure-authentication-with-ad-b2c-8b76c81dd48e this article approach. My AAD is B2B. But after logged in I get a error in pop up:
Cannot GET /auth/openid/return
Any suggestion or article, documentation would be helpful.
Currently there is no native SDK for Flutter to integrate with Azure AD.
There is already a similar User voice.. You can vote for it or else you can create a new one.
I have used a pub.dev/packages/aad_oauth#-readme-tab this package to get acces token.
Even tough My app service was not b2c, I could successfully logged in and log out.

AADSTS50001 error on Web API with Azure AD

I have created a new web api and deployed it on azure. The api works with azure AD authentication. This api we need to consume from PowerBI-Desktop application.
If i test the api on browser which is deployed on azure it works fine. However, if I try to consume it in PowerBI it gives the following error.
invalid_resource: AADSTS50001: The application named was not found in the tenant named . This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.
Why I am getting this error ?
Any help on this appreciated !
You can log in as an admin and make a GET request like so:
https://login.microsoftonline.com/common/adminconsent?client_id=[APPLICATION ID]&redirect_uri=[REDIRECT URI]
And then you'll authorize the application and you'll be able to authenticate =)

Azure AD authentication fails with error message: "Error validating credentials. AADSTS50012: Authentication failed"

I've been working on a multi-tenant web application that uses Azure AD authentication, and authentication will intermittently fail with the error message: "AADSTS70002: Error validating credentials. AADSTS50012: Authentication failed." To be more clear, the steps I go through are:
Go to my web app, and click on link to go to Azure AD authentication
Enter valid user credentials for Azure
If this is the first time using my web app, Azure asks the user to grant permissions to their Azure AD information
After accepting the permissions, Azure redirects to the reply URL that I've set up in Azure AD for my application, but it replies with the aforementioned error in the URL string
The application itself is a Node.js web app that uses the Passport module for Azure AD authentication, although I don't think Passport is the source of the problem because the error I get is passed by Azure to the web application's reply URL.
I haven't had luck identifying the source, but I have seen posts from people with similar issues. I have a number of AD accounts that I use both personally and for work, and it seems that there is some remnant left in the browser's cache or local storage that causes this issue because I can switch to another browser or into incognito mode and the problem resolves itself.
I'd like to identify if this is a problem with Azure itself, the way my application handles authentication, or with my work/third party applications implement AD authentication.
I am trying to reproduce this issue using the code sample here in Chrome, however failed.
Based on the same issue link you mentioned, I noticed that the endpoint for he/she using was incorrect. To develop the multi-tenant app, we need to change the specific endpoint with common like below:
https://login.microsoftonline.com/common/
Were you using the specific endpoint? If not, would you mind sharing a code sample to help us to reproduce this issue?

Resources