Identityserver4.admin: Help with external provider connection Azure AD

[Felipefuji]

Hello, I have made the connection adding the OIC configurations, but when I click on the button generated on the login page, it returns this error. Attached images of the code and the error.

[skoruba]

Please check this article - how to setup azure ad: https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-v2-aspnet-core-webapp

[Felipefuji]

If I use the integration specified in the associated documentation, the _singInManager.GetExternalLoginInfoAsync () method always returns null.

[mitirazvan]

Hi, in our case we have the following configuration:

And in the appsettings.json we have this configuration:

We had some issues with the creation of the external user (AutoProvisionUserAsync) some claims didn't match but other than that everything worked.

In your case set the ValidateIssuer = false and remove the IssuerValidatior method because that is a custom implementation;
But from what i can understand from your exception it seems that it might a problem of communication. Maybe your URL is not well created.

[Felipefuji]

I am finally using this code. With it I have been able to solve the problem of _signInManager.ExternalLoginSignInAsync ().
I don't know if it's the best option but it worked for me.

`

authenticationBuilder
.AddAzureAD(AzureADDefaults.AuthenticationScheme,AzureADDefaults.OpenIdScheme,AzureADDefaults.CookieScheme,AzureADDefaults.DisplayName, options =>
{
options.ClientId = externalProviderConfiguration.AzureADClientId;
options.TenantId = externalProviderConfiguration.AzureADTenantId;
options.Domain = externalProviderConfiguration.AzureADDomain;
options.Instance = externalProviderConfiguration.AzureADInstance;
options.CallbackPath = externalProviderConfiguration.AzureADCallbackPath;
options.CookieSchemeName = IdentityConstants.ExternalScheme;
});

`

[ioxFR]

Hi all,

Is it planned to integrate this configurable possibility to the main repo?
For people who use built docker image it can be interesting i think.
What do you think about that ? @skoruba
In my case, i using built docker images rc3 and infact i would like to integrate azureAD authentication.
I can implement in my side this configurable part and propose as PR if you want.

Valentin

[skoruba]

Good idea, could you please send a PR?
Thanksx.

[ioxFR]

@skoruba sure, i currently testing it on my side.
I send PR this week for that :)