Using Azure AD without codebehind

Question

I am learning Windows Identity Foundation and trying to understand authentication via Azure AD using the web.config as described here , but I can not understand, where to find issuer and realm for my application on Azure Portal . Can anybody describe me where is it?

Answer 1

You can obtain the Issuer in Azure Portal - App Registrations by selecting the 'Endpoint':

You usually need only the first part of URL: the issuer refers to your tenant - which will usually be similar to https://login.microsoftonline.com/ {Guid}

The Realm can be refereed as App Id URI in your App Registration: Select your application and click Settings/ Properties to find the value of this parameter.

However if your main objective is to have an easy way to provide sign-in for Azure AD users without code change , Azure AD Express Authentication may be an easier alternative: where we can just flip a switch to protect your web site so it only accepts sign-in from Azure AD accounts. For information about Express Auth, see this article .