Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

In Active Directory, what is a resource?

Tags:

adal

In the examples and tests for the AAD node.js library, 00000002-0000-0000-c000-000000000000 is always passed as the resource. What is 00000002-0000-0000-c000-000000000000?

The documentation just says that a resource is "A URI that identifies the resource for which the token is valid." But 00000002-0000-0000-c000-000000000000 is a UUID. What is a resource, and what can the value here be?

like image 505
forivall Avatar asked Mar 30 '16 00:03

forivall


People also ask

What is resources in Active Directory?

This data store, also known as the directory, contains information about Active Directory objects. These objects typically include shared resources such as servers, volumes, printers, and the network user and computer accounts. For more information about the Active Directory data store, see Directory data store.

What are domain resources?

A Resource Domain allows Server Groups to be grouped together and associated with a type of application resource. Each Resource Domain has a “Profile” that indicates the application usage of the resource domain.

How do you create a resource in Active Directory?

In the Azure portal, select Azure Active Directory > Identity Governance. On the left menu, select Catalogs and then open the catalog you want to add resources to. On the left menu, select Resources. Select Add resources.

What is resource forest in Active Directory?

A forest is a logical construct used by Active Directory Domain Services (AD DS) to group one or more domains. The domains then store objects for user or groups, and provide authentication services. In an Azure AD DS managed domain, the forest only contains one domain.


3 Answers

Just to answer one part of your question, 00000002-0000-0000-c000-000000000000 is the app id of the Graph API in all tenants. If you do not pass in a resource parameter when requesting an OAuth 2.0 token it defaults to this. Source: Azure Active Directory application model

like image 83
Iain Avatar answered Oct 20 '22 01:10

Iain


00000002-0000-0000-c000-000000000000 is a resourceAppId. Add: If you already have a web app, Click "Download Manifest", you could find the resourceAppId in the JSON Manifest file. enter image description here

enter image description here

You could find these apps in Permissions to other applications as below picture, config your web app permission to other application, if the resource application is selected, it will display in Manifest. enter image description here

If you want to know more information, pls refer to https://azure.microsoft.com/en-us/documentation/articles/active-directory-application-manifest/

like image 39
Lily_user4045 Avatar answered Oct 20 '22 01:10

Lily_user4045


To answer the other half of my question, a resource is any kind of entity that can be accessed by an application. In Azure, they are referenced via their URI. Examples include:

  • https://graph.microsoft.com
  • http://localhost:8080
  • https://mydevapp.azurewebsites.net
  • spn:d13730c8-d56f-4d9e-9e1a-9e2afebbca46

00000002-0000-0000-c000-000000000000 is merely a short form of the URI spn:00000002-0000-0000-c000-000000000000, which, as mentioned, is the app id of the Graph API in all tenants

like image 34
forivall Avatar answered Oct 20 '22 01:10

forivall