简体繁体 English

授予访问权限以使用Azure AD登录

[英]Grant access to login using Azure AD

原文 2017-01-27 08:13:58 0 1 asp.net/ azure/ web-applications/ login/ azure-active-directory

I created an application in ASP.NET with Azure AD login. 我使用Azure AD登录在ASP.NET中创建了一个应用程序。 My problem is when I'm trying to login using my company user (User type: Member). 我的问题是当我尝试使用公司用户（用户类型：成员）登录时。 I have to mention that I don't have admin access. 我不得不提一下，我没有管理员权限。 I successfully created an application in the azure portal. 我在azure门户中成功创建了一个应用程序。 The error that I receive when I try to login is : "AADSTS90093: Does not have access to consent." 尝试登录时收到的错误是：“ AADSTS90093：无权获得同意。” I know that you may have to grant application permissions, but is there anything that I can do on my end ? 我知道您可能必须授予应用程序许可权，但是我到底能做些什么？ Is there another way to do this and grant access to login using company profile ? 还有另一种方法可以授予使用公司资料登录的权限吗？

1 个解决方案

There are 3 things you could check: 您可以检查3件事：

Permissions at Azure AD Level : An Azure AD administrator can restrict users to grant access to apps. Azure AD级别的权限 ：Azure AD管理员可以限制用户授予对应用程序的访问权限。
Permissions at application level : Please check the "User Assignment Settings" at the application level. 应用程序级别的权限 ：请在应用程序级别检查“用户分配设置”。 Combined this with the permission above, a user may not be able to access the application. 结合以上许可，用户可能无法访问该应用程序。
Code : Please check your code and see if you're doing prompt=admin_consent when sending the request to Azure AD for authentication/authorization. 代码：将请求发送到Azure AD进行身份验证/授权时，请检查您的代码并查看您是否在执行prompt=admin_consent 。
Portal : You can grant consent via the Azure Portal by clicking the Grant Permissions button inside the app's blade. 门户：可以通过单击应用程序刀片内的“ 授予权限”按钮，通过Azure门户授予同意。