简体繁体 English

Asp.net MVC表单身份验证应用程序转换为Azure Active Directory

[英]Asp.net MVC form Authentication Application conversion to Azure Active Directory

原文 2018-12-13 19:05:32 7 1 c#/ azure/ azure-active-directory

We have an old application which developed on Asp.net MVC 3 I convert it and update from 4.0 to 4.6 framework things are working pretty good. 我们有一个在Asp.net MVC 3上开发的旧应用程序，我将其转换并从4.0升级到4.6框架，一切正常。 Just got one more request to convert the application to use Azure Active Directory authentication. 刚收到一个将应用程序转换为使用Azure Active Directory身份验证的请求。 We are using form authentication right now. 我们现在正在使用表单身份验证。

The issue I am having is the application is so huge, and the application has its custom roles and authentications for every single page. 我遇到的问题是应用程序非常庞大，并且该应用程序对每个页面都有其自定义角色和身份验证。

So what I am trying to achieve register app on the Active directory and when a user opens my application it redirect it to office 360 login, and he can log in there and redirect to the application and return me his email address. 因此，我要在Active Directory上实现注册应用程序，然后当用户打开我的应用程序时，它将其重定向到Office 360登录，他可以登录并重定向到该应用程序，并向我返回他的电子邮件地址。 After that, I can verify the user and log in it to the application from the backhand code using old form authentication and create session etc. 之后，我可以验证用户并使用旧表单身份验证从反手代码将其登录到应用程序中并创建会话等。

1 个解决方案

If you're looking for a starting point, here are a couple of relevant samples that work with ASP.NET MVC web application using Azure AD for Authentication. 如果您正在寻找一个起点，那么这里有一些相关的示例，这些示例与使用Azure AD进行身份验证的ASP.NET MVC Web应用程序一起使用。

Additionaly, to tackle the custom roles that you mention as part of your current application, you could look at using Application Roles supported by Azure AD and also Security Groups which is what these samples show. 另外，要解决您在当前应用程序中提到的自定义角色，您可以查看使用Azure AD支持的应用程序角色以及这些示例所显示的安全组。

Authorization in a web app using Azure AD application roles & role claims 使用Azure AD应用程序角色和角色声明的Web应用程序中的授权

Authorization in a web app using Azure AD groups & group claims 使用Azure AD组和组声明在Web应用中进行授权

Here are similar SO posts where I've covered a little bit more detail on the claims and implementation which you may find relevant. 这是类似的SO帖子，我在其中详细介绍了可能与您相关的声明和实现。