How to authenticate user with Azure Active Directory using OAuth 2.0?

c# authentication azure oauth-2.0 azure-active-directory
COBOL picture COBOL · Feb 18, 2015 · Viewed 44k times · Source

I have a REST API written in C# and I need to authenticate with an existing Azure AD service. I currently have the username and password of the user wishing to authenticate. I need to authenticate with Azure AD and receive an access token from the server.

Can someone please point me in the direction of some articles/tutorials that explain how to do this?

Answer

Rich Randall picture Rich Randall · Feb 19, 2015

You should avoid handling the users credentials. There are serious security implications when collecting a users credentials that are mitigated by using OAuth 2.0 or OpenID Connect to get a token without directly handling the credentials. Also, if you have your own credential collection UI then you may find that sign in fails in the future if multi-factor authentication is turned on. In that case, more information may be necessary to authenticate the user than you are collecting, a one time password for instance. If you allow Azure AD to present the authentication experience via OAuth 2.0 or OpenID Connect, then you are insulated from the specific authentication method being employed. Collecting the users Azure AD credentials is a bad practice to be avoided if at all possible.

I don't have enough detail on the exact scenario to be confident that the following sample applies, but it will at least provide a good starting point. This sample shows how to create a native app that calls a REST API that can then call an Azure resource in the safest way possible.

https://github.com/AzureADSamples/WebAPI-OnBehalfOf-DotNet

You can find lots of other samples here that can be used to construct a solution for your particular scenario.

https://github.com/AzureADSamples

If you provide some more detail I can give more specific guidance.

Related questions

Using GraphServiceClient to get refresh tokens when authenticating using UserPasswordCredential in AuthenticationContext

Sincere apologies if I miss something from this post, as I'm at my wits end after reading around for hours. I'm attempting to write a back-end service (Windows) which will connect to the MS Graph API via Azure AD. I'm …

Read More
Authenticating with Windows Azure Active Directory directly without opening web browser

I referred this question and this MSDN post, but couldn't get the problem fixed. Below code demonstrates how to perform the WAAD authentication using web browser: AuthenticationContext auth = new AuthenticationContext("https://login.windows.net/" + myDomain); AuthenticationResult result = auth.AcquireToken(resource, …

Read More
Validate a username and password against Active Directory?

How can I validate a username and password against Active Directory? I simply want to check if a username and password are correct.

Read More