Add Entra ID tab - draft commit

Author: maud-lv

articles/azure-app-configuration/quickstart-aspnet-core-app.md

@@ -1,13 +1,13 @@
 ---
-title: Quickstart for Azure App Configuration with ASP.NET Core | Microsoft Docs
+title: Quickstart for Azure App Configuration with ASP.NET Core
 description: Create an ASP.NET Core app with Azure App Configuration to centralize storage and management of application settings for an ASP.NET Core application.
 services: azure-app-configuration
 author: zhenlan
 ms.service: azure-app-configuration
 ms.devlang: csharp
 ms.custom: devx-track-csharp, mode-other, engagement-fy23
 ms.topic: quickstart
-ms.date: 02/20/2024
+ms.date: 11/20/2024
 ms.author: zhenlwa
 #Customer intent: As an ASP.NET Core developer, I want to learn how to manage all my app settings in one place.
 ---
@@ -47,13 +47,43 @@ dotnet new webapp --output TestAppConfig --framework net6.0
 
 ## Connect to the App Configuration store
 
-1. Navigate into the project's directory *TestAppConfig*, and run the following command to add a [Microsoft.Azure.AppConfiguration.AspNetCore](https://www.nuget.org/packages/Microsoft.Azure.AppConfiguration.AspNetCore) NuGet package reference:
+Connect to your App Configuration store using Microsoft Entra ID (recommended), or a connection string.
+
+1. Navigate into the project's directory *TestAppConfig*, and run the following command to add NuGet package references.
+
+    ### [Microsoft Entra ID (recommended)](#tab/entra-id)
 
     ```dotnetcli
     dotnet add package Microsoft.Azure.AppConfiguration.AspNetCore
+    dotnet add package Azure.Identity
+    ```
+
+    ### [Connection string](#tab/connection-string)
+    ```dotnetcli
+    dotnet add package Microsoft.Azure.AppConfiguration.AspNetCore
+    ```
+    ---
+
+1. Run the following command to restore packages for your project:
+
+    ```dotnetcli
+    dotnet restore
     ```
 
-1. Run the following command. The command uses [Secret Manager](/aspnet/core/security/app-secrets) to store a secret named `ConnectionStrings:AppConfig`, which stores the connection string for your App Configuration store. Replace the `<your_connection_string>` placeholder with your App Configuration store's connection string. You can find the connection string under **Access Keys** of your App Configuration store in the Azure portal.
+1. Create a user secret for the application by navigating into the *TestAppConfig* folder and running the following command.
+
+    ### [Microsoft Entra ID (recommended)](#tab/entra-id)
+        
+    The command uses [Secret Manager](/aspnet/core/security/app-secrets) to store a secret named `Endpoints:AppConfiguration`, which stores the endpoint for your App Configuration store. Replace the `<your-App-Configuration-endpoint>` placeholder with your App Configuration store's endpoint. You can find the endpoint in your App Configuration store's **Access settings** in the Azure portal.
+    
+    ```dotnetcli
+    dotnet user-secrets init
+    dotnet user-secrets set Endpoints:AppConfiguration "<your-App-Configuration-endpoint>"
+    ```
+    
+    ### [Connection string](#tab/connection-string)
+
+    The command uses [Secret Manager](/aspnet/core/security/app-secrets) to store a secret named `ConnectionStrings:AppConfig`, which stores the connection string for your App Configuration store. Replace the `<your_connection_string>` placeholder with your App Configuration store's connection string. You can find the connection string in your App Configuration store's **Access settings** in the Azure portal.
 
     ```dotnetcli
     dotnet user-secrets init
@@ -62,10 +92,52 @@ dotnet new webapp --output TestAppConfig --framework net6.0
 
     > [!TIP]
     > Some shells will truncate the connection string unless it's enclosed in quotes. Ensure that the output of the `dotnet user-secrets list` command shows the entire connection string. If it doesn't, rerun the command, enclosing the connection string in quotes.
-
+    
     Secret Manager stores the secret outside of your project tree, which helps prevent the accidental sharing of secrets within source code. It's used only to test the web app locally. When the app is deployed to Azure like [App Service](../app-service/overview.md), use the *Connection strings*, *Application settings* or environment variables to store the connection string. Alternatively, to avoid connection strings all together, you can [connect to App Configuration using managed identities](./howto-integrate-azure-managed-service-identity.md) or your other [Microsoft Entra identities](./concept-enable-rbac.md).
+    
+    ---
+
+1. Open *Program.cs* and add the following namespaces:
+
+
+    ### [Microsoft Entra ID (recommended)](#tab/entra-id)
+    ```csharp
+    using Microsoft.Extensions.Configuration;
+    using Microsoft.Azure.AppConfiguration.AspNetCore;
+    using Azure.Identity;
+    ```
+
+    ### [Connection string](#tab/connection-string)
+    ```csharp
+    using Microsoft.Extensions.Configuration;
+    using Microsoft.Azure.AppConfiguration.AspNetCore;
+    ```
+    ---
+
+1. Connect to your App Configuration store by calling the `AddAzureAppConfiguration` method in the `Program.cs` file.
+ 
+    ### [Microsoft Entra ID (recommended)](#tab/entra-id)
+
+    You use the `DefaultAzureCredential` to authenticate to your App Configuration store. Follow the [instructions](./concept-enable-rbac.md#authentication-with-token-credentials) to assign your credential the **App Configuration Data Reader** role. Be sure to allow sufficient time for the permission to propagate before running your application.
+
+    ```csharp
+    var builder = new ConfigurationBuilder();
+    builder.AddAzureAppConfiguration(options =>
+    {
+        string endpoint = Environment.GetEnvironmentVariable("Endpoint");
+        options.Connect(new Uri(endpoint), new DefaultAzureCredential());
+    });
+
+    // Load configuration from Azure App Configuration
+    builder.Configuration.AddAzureAppConfiguration(endpoint);
+
+    // The rest of existing code in program.cs
+    // ... ...    
+    ```
+
+    This code connects to your App Configuration store using Microsoft Entra ID and load *all* key-values that have *no labels*. For more information on the App Configuration provider, see the [App Configuration provider API reference](/dotnet/api/Microsoft.Extensions.Configuration.AzureAppConfiguration).
 
-1. Open *Program.cs* and add Azure App Configuration as an extra configuration source by calling the `AddAzureAppConfiguration` method.
+    ### [Connection string](#tab/connection-string)
 
     ```csharp
     var builder = WebApplication.CreateBuilder(args);
@@ -80,7 +152,7 @@ dotnet new webapp --output TestAppConfig --framework net6.0
     // ... ...
     ```
 
-    This code will connect to your App Configuration store using a connection string and load *all* key-values that have *no labels*. For more information on the App Configuration provider, see the [App Configuration provider API reference](/dotnet/api/Microsoft.Extensions.Configuration.AzureAppConfiguration).
+    This code connects to your App Configuration store using a connection string and loads *all* key-values that have *no labels*. For more information on the App Configuration provider, see the [App Configuration provider API reference](/dotnet/api/Microsoft.Extensions.Configuration.AzureAppConfiguration).
 
 ## Read from the App Configuration store