如何使用身份服务器 3 和 Microsoft 团队应用程序使用 Azure AD 令牌进行身份验证

Question

We use custom idp (identity server 3) to authenticate users on the system. Now I have a requirement to implement Azure AD authentication. I tried adding Azure AD as an external provider it is working fine on the browser, but on MS teams app, it is not working because the Microsoft teams app opens in an Iframe, on which azure Ad doesn't work. I implemented Microsoft msal.js library to authenticate using Azure AD. I am able to authenticate and get the token on the frontend. But how can I pass that token to identity server 3 and authenticate user using my own identity server.

Answer 1

Did you have a look at these resources which seem to explain how to implement your setup:

• https://docs.microsoft.com/en-us/microsoftteams/sign-in-teams
• https://docs.microsoft.com/en-us/microsoftteams/platform/concepts/authentication/authentication
• https://docs.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/authentication/auth-tab-aad
• https://docs.microsoft.com/en-us/microsoftteams/platform/concepts/authentication/configure-identity-provider

Answer 2

if I understand your requirement correctly then you can try out the below solution: User is authenticated using Azure Ad when he logs in to Teams App. Now you can send the logged in user's AD information (User Principal Name preferably) to your IS3 and authenticate from your end.