ASP.net Mvc 5 - 从 azure AD 在 MVC5 web 应用程序中授权的组策略

Question

I am working in asp.net MVC 5 application Authenticate with external identity provider Azure AD. I want to create authorization with group members. How can I add a group policy in my application? I could found a solution for .net core but not for .net framework.

Answer 1

It seems the sample that you want. This sample shows how to build an MVC web application that uses Azure AD Groups for authorization. But it is the old one, the newer sample is used for ASP.net core.

This is a similar issue about using Azure AD groups & group claims.

Answer 2

Allow group policy claims in azure Update manifest file in Azure AD app registraions

Use the custom attributes to check claims.

public class ClaimsAuthorize : AuthorizeAttribute {
private string claimType;
private string claimValue;

public ClaimsAuthorize(string claimType, string claimValue)
{
  this.claimType = claimType;
  this.claimValue = claimValue;
}

public ClaimsAuthorize()
{
  claimType = "groups";
  claimValue = ConfigurationManager.AppSettings["GroupObjectId"];
}

public override void OnAuthorization(System.Web.Mvc.AuthorizationContext filterContext)
{
  var user = filterContext.HttpContext.User as ClaimsPrincipal;

  if (user.HasClaim(claimType, claimValue))
    base.OnAuthorization(filterContext);
  else
    throw new UnauthorizedAccessException();
}}