In the examples and tests for the AAD node.js library, 00000002-0000-0000-c000-000000000000
is always passed as the resource. What is 00000002-0000-0000-c000-000000000000
?
The documentation just says that a resource is "A URI that identifies the resource for which the token is valid." But 00000002-0000-0000-c000-000000000000
is a UUID. What is a resource, and what can the value here be?
This data store, also known as the directory, contains information about Active Directory objects. These objects typically include shared resources such as servers, volumes, printers, and the network user and computer accounts. For more information about the Active Directory data store, see Directory data store.
A Resource Domain allows Server Groups to be grouped together and associated with a type of application resource. Each Resource Domain has a “Profile” that indicates the application usage of the resource domain.
In the Azure portal, select Azure Active Directory > Identity Governance. On the left menu, select Catalogs and then open the catalog you want to add resources to. On the left menu, select Resources. Select Add resources.
A forest is a logical construct used by Active Directory Domain Services (AD DS) to group one or more domains. The domains then store objects for user or groups, and provide authentication services. In an Azure AD DS managed domain, the forest only contains one domain.
Just to answer one part of your question, 00000002-0000-0000-c000-000000000000 is the app id of the Graph API in all tenants. If you do not pass in a resource parameter when requesting an OAuth 2.0 token it defaults to this. Source: Azure Active Directory application model
00000002-0000-0000-c000-000000000000
is a resourceAppId. Add: If you already have a web app, Click "Download Manifest", you could find the resourceAppId in the JSON Manifest file.
You could find these apps in Permissions to other applications
as below picture, config your web app permission to other application, if the resource application is selected, it will display in Manifest.
If you want to know more information, pls refer to https://azure.microsoft.com/en-us/documentation/articles/active-directory-application-manifest/
To answer the other half of my question, a resource is any kind of entity that can be accessed by an application. In Azure, they are referenced via their URI. Examples include:
https://graph.microsoft.com
http://localhost:8080
https://mydevapp.azurewebsites.net
spn:d13730c8-d56f-4d9e-9e1a-9e2afebbca46
00000002-0000-0000-c000-000000000000
is merely a short form of the URI spn:00000002-0000-0000-c000-000000000000
, which, as mentioned, is the app id of the Graph API in all tenants
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With