I am trying to add Active Directory Authentication to my Azure App Service.
The AD I am using is in a different tenant to the App Service so I need to use Advanced Settings instead of Express (where it creates things for you).
One of the fields is "Issuer Url" and the pop up help says
"Issuer URL for your Active Directory, TenantId of your Active Directory can be obtained by PowerShell command Get-AzureAccount or by browsing to your Directory from the management portal"
Where do I find the "Issuer Url" in the portal?
The Issuer, which should be a URL like https://login.microsoftonline.com/GUID where the GUID is a particular GUID identifying your Azure Active Directory tenant. This is the Directory (tenant) ID in the Azure App Registration Portal.
To find your instance URL from Microsoft Azure Sign in to the Microsoft Azure portal (https://portal.azure.com/). Search for SaaS, and then click on the Saas Service. The SaaS page displays.
For Resource URL, enter https://management.core.windows.net/ .
On the App registrations page, click on the Endpoints button at the top, then copy the WS-FEDERATION SIGN-ON ENDPOINT URL but remove the /wsfed ending from the URL. The end result should look like https://login.microsoftonline.com/00000000-0000-0000-0000-000000000000. The domain name may be different for a sovereign cloud. This will serve as the Issuer URL.

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With