You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
*<xref:Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions.Authority%2A> and <xref:Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConnectOptions.ClientId%2A>: Sets the Authority and Client ID for OIDC calls.
@@ -386,12 +386,12 @@ The following <xref:Microsoft.AspNetCore.Authentication.OpenIdConnect.OpenIdConn
386
386
387
387
Example:
388
388
389
-
* Authority (`{AUTHORITY}`): `https://login.microsoftonline.com/a3942615-d115-4eb7-bc84-9974abcf5064/v2.0/` (uses Tenant ID `a3942615-d115-4eb7-bc84-9974abcf5064`)
390
-
* Client Id (`{CLIENT ID}`): `4ba4de56-9cef-45d9-83fa-a4c18f9f5f0f`
389
+
* Authority (`{AUTHORITY}`): `https://login.microsoftonline.com/aaaabbbb-0000-cccc-1111-dddd2222eeee/v2.0/` (uses Tenant ID `aaaabbbb-0000-cccc-1111-dddd2222eeee`)
390
+
* Client Id (`{CLIENT ID}`): `00001111-aaaa-2222-bbbb-3333cccc4444`
The preceding example pertains to an app registered in a tenant with an AAD B2C tenant type. If the app is registered in an ME-ID tenant, the App ID URI is different, thus the audience is different.
543
543
544
544
Example:
545
545
546
-
App ID URI (`{APP ID URI}`): `api://{CLIENT ID}` with Application (Client) Id (`{CLIENT ID}`): `4ba4de56-9cef-45d9-83fa-a4c18f9f5f0f`
546
+
App ID URI (`{APP ID URI}`): `api://{CLIENT ID}` with Application (Client) Id (`{CLIENT ID}`): `00001111-aaaa-2222-bbbb-3333cccc4444`
*<xref:Microsoft.AspNetCore.Authentication.JwtBearer.JwtBearerOptions.Authority%2A>: Sets the Authority for making OpenID Connect calls. Match the value to the Authority configured for the OIDC handler in `BlazorWebAppOidc/Program.cs`:
@@ -557,7 +557,7 @@ Configure the project in the <xref:Microsoft.AspNetCore.Authentication.JwtBearer
557
557
558
558
Example:
559
559
560
-
Authority (`{AUTHORITY}`): `https://login.microsoftonline.com/a3942615-d115-4eb7-bc84-9974abcf5064/v2.0/` (uses Tenant ID `a3942615-d115-4eb7-bc84-9974abcf5064`)
560
+
Authority (`{AUTHORITY}`): `https://login.microsoftonline.com/aaaabbbb-0000-cccc-1111-dddd2222eeee/v2.0/` (uses Tenant ID `aaaabbbb-0000-cccc-1111-dddd2222eeee`)
Copy file name to clipboardExpand all lines: aspnetcore/blazor/security/webassembly/hosted-with-azure-active-directory-b2c.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -44,7 +44,7 @@ Register an AAD B2C app for the *Server API app*:
44
44
45
45
Record the following information:
46
46
47
-
**Server API app* Application (client) ID (for example, `41451fa7-82d9-4673-8fa5-69eff5a761fd`)
47
+
**Server API app* Application (client) ID (for example, `00001111-aaaa-2222-bbbb-3333cccc4444`)
48
48
* AAD B2C instance (for example, `https://contoso.b2clogin.com/`, which includes the trailing slash). The instance is the scheme and host of an Azure B2C app registration, which can be found by opening the **Endpoints** window from the **App registrations** page in the Azure portal.
49
49
* Primary/Publisher/Tenant domain (for example, `contoso.onmicrosoft.com`): The domain is available as the **Publisher domain** in the **Branding** blade of the Azure portal for the registered app.
50
50
@@ -60,7 +60,7 @@ Select **Expose an API** from the sidebar and follow these steps:
60
60
61
61
Record the following information:
62
62
63
-
* App ID URI GUID (for example, record `41451fa7-82d9-4673-8fa5-69eff5a761fd` from `https://contoso.onmicrosoft.com/41451fa7-82d9-4673-8fa5-69eff5a761fd`)
63
+
* App ID URI GUID (for example, record `00001111-aaaa-2222-bbbb-3333cccc4444` from `https://contoso.onmicrosoft.com/00001111-aaaa-2222-bbbb-3333cccc4444`)
64
64
* Scope name (for example, `API.Access`)
65
65
66
66
### Register a client app in Azure
@@ -77,7 +77,7 @@ Register an AAD B2C app for the *Client app*:
77
77
> [!NOTE]
78
78
> Supplying the port number for a `localhost` AAD B2C redirect URI isn't required. For more information, see [Redirect URI (reply URL) restrictions and limitations: Localhost exceptions (Entra documentation)](/entra/identity-platform/reply-url#localhost-exceptions).
79
79
80
-
Record the *Client app* Application (client) ID (for example, `4369008b-21fa-427c-abaa-9b53bf58e538`).
80
+
Record the *Client app* Application (client) ID (for example, `11112222-bbbb-3333-cccc-4444dddd5555`).
81
81
82
82
In **Authentication** > **Platform configurations** > **Single-page application**:
|`{AAD B2C INSTANCE}`| Instance |`https://contoso.b2clogin.com/` (includes the trailing slash) |
118
118
|`{PROJECT NAME}`|—|`BlazorSample`|
119
-
|`{CLIENT APP CLIENT ID}`| Application (client) ID for the **:::no-loc text="Client":::** app |`4369008b-21fa-427c-abaa-9b53bf58e538`|
119
+
|`{CLIENT APP CLIENT ID}`| Application (client) ID for the **:::no-loc text="Client":::** app |`11112222-bbbb-3333-cccc-4444dddd5555`|
120
120
|`{DEFAULT SCOPE}`| Scope name |`API.Access`|
121
-
|`{SERVER API APP CLIENT ID}`| Application (client) ID for the **:::no-loc text="Server":::** app |`41451fa7-82d9-4673-8fa5-69eff5a761fd`|
122
-
|`{SERVER API APP ID URI GUID}`| Application ID URI GUID |`41451fa7-82d9-4673-8fa5-69eff5a761fd` (GUID ONLY, matches the `{SERVER API APP CLIENT ID}`) |
121
+
|`{SERVER API APP CLIENT ID}`| Application (client) ID for the **:::no-loc text="Server":::** app |`00001111-aaaa-2222-bbbb-3333cccc4444`|
122
+
|`{SERVER API APP ID URI GUID}`| Application ID URI GUID |`00001111-aaaa-2222-bbbb-3333cccc4444` (GUID ONLY, matches the `{SERVER API APP CLIENT ID}`) |
123
123
|`{SIGN UP OR SIGN IN POLICY}`| Sign-up/sign-in user flow |`B2C_1_signupsignin1`|
The `{SCOPE URI}` is the default access token scope (for example, `https://contoso.onmicrosoft.com/41451fa7-82d9-4673-8fa5-69eff5a761fd/API.Access` or the custom URI that you configured in the Azure portal).
325
+
The `{SCOPE URI}` is the default access token scope (for example, `https://contoso.onmicrosoft.com/00001111-aaaa-2222-bbbb-3333cccc4444/API.Access` or the custom URI that you configured in the Azure portal).
326
326
327
327
The <xref:Microsoft.Extensions.DependencyInjection.MsalWebAssemblyServiceCollectionExtensions.AddMsalAuthentication%2A> method accepts a callback to configure the parameters required to authenticate an app. The values required for configuring the app can be obtained from the Azure Portal AAD configuration when you register the app.
Copy file name to clipboardExpand all lines: aspnetcore/blazor/security/webassembly/hosted-with-microsoft-entra-id.md
+14-14Lines changed: 14 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -47,8 +47,8 @@ Register an ME-ID app for the *Server API app*:
47
47
48
48
Record the following information:
49
49
50
-
**Server API app* Application (client) ID (for example, `41451fa7-82d9-4673-8fa5-69eff5a761fd`)
51
-
* Directory (tenant) ID (for example, `e86c78e2-8bb4-4c41-aefd-918e0565a45e`)
50
+
**Server API app* Application (client) ID (for example, `00001111-aaaa-2222-bbbb-3333cccc4444`)
51
+
* Directory (tenant) ID (for example, `aaaabbbb-0000-cccc-1111-dddd2222eeee`)
52
52
* ME-ID Primary/Publisher/Tenant domain (for example, `contoso.onmicrosoft.com`): The domain is available as the **Publisher domain** in the **Branding** blade of the Azure portal for the registered app.
53
53
54
54
In **API permissions**, remove the **Microsoft Graph** > **User.Read** permission, as the server API app doesn't require additional API access for merely signing in users and calling server API endpoints.
@@ -66,7 +66,7 @@ In **Expose an API**:
66
66
67
67
Record the following information:
68
68
69
-
* App ID URI GUID (for example, record `41451fa7-82d9-4673-8fa5-69eff5a761fd` from the App ID URI of `api://41451fa7-82d9-4673-8fa5-69eff5a761fd`)
69
+
* App ID URI GUID (for example, record `00001111-aaaa-2222-bbbb-3333cccc4444` from the App ID URI of `api://00001111-aaaa-2222-bbbb-3333cccc4444`)
70
70
* Scope name (for example, `API.Access`)
71
71
72
72
> [!IMPORTANT]
@@ -86,7 +86,7 @@ Register an ME-ID app for the *Client app*:
86
86
> [!NOTE]
87
87
> Supplying the port number for a `localhost` ME-ID redirect URI isn't required. For more information, see [Redirect URI (reply URL) restrictions and limitations: Localhost exceptions (Entra documentation)](/entra/identity-platform/reply-url#localhost-exceptions).
88
88
89
-
Record the **:::no-loc text="Client":::** app Application (client) ID (for example, `4369008b-21fa-427c-abaa-9b53bf58e538`).
89
+
Record the **:::no-loc text="Client":::** app Application (client) ID (for example, `11112222-bbbb-3333-cccc-4444dddd5555`).
90
90
91
91
In **Authentication** > **Platform configurations** > **Single-page application**:
92
92
@@ -121,12 +121,12 @@ dotnet new blazorwasm -au SingleOrg --api-client-id "{SERVER API APP CLIENT ID}"
121
121
| Placeholder | Azure portal name | Example |
122
122
| --- | --- | --- |
123
123
|`{PROJECT NAME}`|—|`BlazorSample`|
124
-
|`{CLIENT APP CLIENT ID}`| Application (client) ID for the **:::no-loc text="Client":::** app |`4369008b-21fa-427c-abaa-9b53bf58e538`|
124
+
|`{CLIENT APP CLIENT ID}`| Application (client) ID for the **:::no-loc text="Client":::** app |`11112222-bbbb-3333-cccc-4444dddd5555`|
125
125
|`{DEFAULT SCOPE}`| Scope name |`API.Access`|
126
-
|`{SERVER API APP CLIENT ID}`| Application (client) ID for the *Server API app*|`41451fa7-82d9-4673-8fa5-69eff5a761fd`|
127
-
|`{SERVER API APP ID URI GUID}`| Application ID URI GUID |`41451fa7-82d9-4673-8fa5-69eff5a761fd` (GUID ONLY, matches the `{SERVER API APP CLIENT ID}`) |
126
+
|`{SERVER API APP CLIENT ID}`| Application (client) ID for the *Server API app*|`00001111-aaaa-2222-bbbb-3333cccc4444`|
127
+
|`{SERVER API APP ID URI GUID}`| Application ID URI GUID |`00001111-aaaa-2222-bbbb-3333cccc4444` (GUID ONLY, matches the `{SERVER API APP CLIENT ID}`) |
|`{TENANT ID}`| Directory (tenant) ID |`e86c78e2-8bb4-4c41-aefd-918e0565a45e`|
129
+
|`{TENANT ID}`| Directory (tenant) ID |`aaaabbbb-0000-cccc-1111-dddd2222eeee`|
130
130
131
131
The output location specified with the `-o|--output` option creates a project folder if it doesn't exist and becomes part of the project's name. **Avoid using dashes (`-`) in the app name that break the formation of the OIDC app identifier (see the earlier WARNING).**
In the preceding scope, the App ID URI/audience is the `https://contoso.onmicrosoft.com/41451fa7-82d9-4673-8fa5-69eff5a761fd` portion of the value, which doesn't include a trailing slash (`/`) and doesn't include the scope name (`API.Access`).
470
+
In the preceding scope, the App ID URI/audience is the `https://contoso.onmicrosoft.com/00001111-aaaa-2222-bbbb-3333cccc4444` portion of the value, which doesn't include a trailing slash (`/`) and doesn't include the scope name (`API.Access`).
Copy file name to clipboardExpand all lines: aspnetcore/blazor/security/webassembly/standalone-with-azure-active-directory-b2c.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -47,7 +47,7 @@ Register an AAD B2C app:
47
47
48
48
Record the following information:
49
49
50
-
* Application (client) ID (for example, `41451fa7-82d9-4673-8fa5-69eff5a761fd`).
50
+
* Application (client) ID (for example, `00001111-aaaa-2222-bbbb-3333cccc4444`).
51
51
* AAD B2C instance (for example, `https://contoso.b2clogin.com/`, which includes the trailing slash): The instance is the scheme and host of an Azure B2C app registration, which can be found by opening the **Endpoints** window from the **App registrations** page in the Azure portal.
52
52
* AAD B2C Primary/Publisher/Tenant domain (for example, `contoso.onmicrosoft.com`): The domain is available as the **Publisher domain** in the **Branding** blade of the Azure portal for the registered app.
0 commit comments