Azure App Service Authentication with Active Directory

Question

I have a dotnet core api in an app service on Azure. When I run this locally, with authentication switched on, I can generate a bearer token and use that to successfully access the end points.

On azure, when authentication is switched off I can access the end points, but when I switch authentication on in azure, I can't access any end points with a token. Postman is just returning the standard response "The page cannot be displayed because an internal server error has occurred".

I can't see anything in application insights so I'm really in the dark.

Hoping someone will know of any common issues that could be behind this.

Thanks in advance

Answer 1

You cannot access your web app authenticated with Azure AD using B2C token .

On local, created web app using Visual Studio only have three authentication choices: As we can see, using Individual User Account is connecting to an Azure AD B2C account.

On portal, you could configure your app service with choices below: If you are using Log in with Azure Active Directory, you should concern it is not same as B2C. Follow this page to configure Azure AD authentication with web app .

Get the AAD bear token:

1. Navigate to the app registrations page in your Azure Active Directory, choose the one you created in configuring authentication step. You would see the information like this:
2. Go to Certificates & secrets page to create a secret, and copy that value, cause you would not see it after leave this page.
3. Open Postman to get the access token, here is the required parameters:
4. Use the bear token you got from last step to access your web app: