Skip to content

Commit 9b14792

Browse files
Merge pull request #249899 from davidmu1/updatesteps21
updated sign-in steps for admin center
2 parents 4c2dd40 + bf317ad commit 9b14792

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/active-directory/develop/msal-net-use-brokers-with-xamarin-apps.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -177,19 +177,19 @@ public static string redirectUriOnIos = "msauth.com.yourcompany.XForms://auth";
177177

178178
Notice that the redirect URI matches the `CFBundleURLSchemes` name that you included in the *Info.plist* file.
179179

180-
Add the redirect URI to the app's registration in the [Azure portal](https://portal.azure.com). To generate a properly formatted redirect URI, use **App registrations** in the Azure portal to generate the brokered redirect URI from the bundle ID.
180+
Add the redirect URI to the app's registration. To generate a properly formatted redirect URI, use **App registrations** to generate the brokered redirect URI from the bundle ID.
181181

182182
**To generate the redirect URI:**
183183

184-
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Application Developer](../roles/permissions-reference.md#application-developer).
184+
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least an [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator).
185185
1. Browse to **Identity** > **Applications** > **Application registrations**.
186186
1. Search for and select the application.
187187
1. Select **Authentication** > **Add a platform** > **iOS / macOS**
188188
1. Enter your bundle ID, and then select **Configure**.
189189

190190
Copy the generated redirect URI that appears in the **Redirect URI** text box for inclusion in your code:
191191

192-
:::image type="content" source="media/msal-net-use-brokers-with-xamarin-apps/portal-01-ios-platform-settings.png" alt-text="iOS platform settings with generated redirect URI in Azure portal":::
192+
:::image type="content" source="media/msal-net-use-brokers-with-xamarin-apps/portal-01-ios-platform-settings.png" alt-text="iOS platform settings with generated redirect URI":::
193193
1. Select **Done** to complete generation of the redirect URI.
194194

195195
## Brokered authentication for Android
@@ -236,19 +236,19 @@ result = await app.AcquireTokenInteractive(scopes)
236236

237237
### Step 4: Add a redirect URI to your app registration
238238

239-
MSAL uses URLs to invoke the broker and then return to your app. To complete that round trip, register a **Redirect URI** for your app by using the [Azure portal](https://portal.azure.com).
239+
MSAL uses URLs to invoke the broker and then return to your app. To complete that round trip, register a **Redirect URI** for your app.
240240

241241
The format of the redirect URI for your application depends on the certificate used to sign the APK. For example:
242242

243243
```
244244
msauth://com.microsoft.xforms.testApp/hgbUYHVBYUTvuvT&Y6tr554365466=
245245
```
246246

247-
The last part of the URI, `hgbUYHVBYUTvuvT&Y6tr554365466=`, is the Base64-encoded version of the signature that the APK is signed with. While developing your app in Visual Studio, if you're debugging your code without signing the APK with a specific certificate, Visual Studio signs the APK for you for debugging purposes. When Visual Studio signs the APK for you in this way, it gives it a unique signature for the machine it's built on. Thus, each time you build your app on a different machine, you'll need to update the redirect URI in the application's code and the application's registration in the Azure portal in order to authenticate with MSAL.
247+
The last part of the URI, `hgbUYHVBYUTvuvT&Y6tr554365466=`, is the Base64-encoded version of the signature that the APK is signed with. While developing your app in Visual Studio, if you're debugging your code without signing the APK with a specific certificate, Visual Studio signs the APK for you for debugging purposes. When Visual Studio signs the APK for you in this way, it gives it a unique signature for the machine it's built on. Thus, each time you build your app on a different machine, you'll need to update the redirect URI in the application's code and the application's registration in order to authenticate with MSAL.
248248

249-
While debugging, you may encounter an MSAL exception (or log message) stating the redirect URI provided is incorrect. **The exception or log message also indicates the redirect URI you should be using** with the current machine you're debugging on. You can use the provided redirect URI to continue developing your app as long as you update redirect URI in code and add the provided redirect URI to the app's registration in the Azure portal.
249+
While debugging, you may encounter an MSAL exception (or log message) stating the redirect URI provided is incorrect. **The exception or log message also indicates the redirect URI you should be using** with the current machine you're debugging on. You can use the provided redirect URI to continue developing your app as long as you update redirect URI in code and add the provided redirect URI to the app's registration.
250250

251-
Once you're ready to finalize your code, update the redirect URI in the code and the application's registration in the Azure portal to use the signature of the certificate you sign the APK with.
251+
Once you're ready to finalize your code, update the redirect URI in the code and the application's registration to use the signature of the certificate you sign the APK with.
252252

253253
In practice, this means you should consider adding a redirect URI for each member of your development team, *plus* a redirect URI for the production signed version of the APK.
254254

@@ -337,7 +337,7 @@ As an alternative, you can configure MSAL to fall back to the embedded browser,
337337

338338
Here are a few tips on avoiding issues when you implement brokered authentication on Android:
339339

340-
- **Redirect URI** - Add a redirect URI to your application registration in the [Azure portal](https://portal.azure.com). A missing or incorrect redirect URI is a common issue encountered by developers.
340+
- **Redirect URI** - Add a redirect URI to your application registration. A missing or incorrect redirect URI is a common issue encountered by developers.
341341
- **Broker version** - Install the minimum required version of the broker apps. Either of these two apps can be used for brokered authentication on Android.
342342
- [Intune Company Portal](https://play.google.com/store/apps/details?id=com.microsoft.windowsintune.companyportal) (version 5.0.4689.0 or greater)
343343
- [Microsoft Authenticator](https://play.google.com/store/apps/details?id=com.azure.authenticator) (version 6.2001.0140 or greater).

0 commit comments

Comments
 (0)