oauth 2.0 - Authenticate against AzureAD (OAuth2) without registering a client? -


i'm trying create web api in azure allows user access it. don't care whether user calls api via postman, curl or .net console app, long user can authenticate against azuread protecting resource, should in.

however, documentation have seen far require me register client azuread.

so, i've got example working, had register console app in azuread.

now, there maybe hundreds or thousands of developers developing apps against api. don't want have register each single 1 azuread. in fact, don't want have know them.

how can that? care users, not client apps. or azuread b2c does?

now, there maybe hundreds or thousands of developers developing apps against api. don't want have register each single 1 azuread. in fact, don't want have know them.

you need register 1 app(web app) protect web api. , if want web api consumed different organization, need enable multi-tenanted feature on azure portal.

after that, if other developers want consumer web api, need register 1 app on tenant , grant web api app app. after can acquire access token web api , request web api access token.

more detail scenario calling web api, can refer code sample below:

active-directory-dotnet-webapp-webapi-openidconnect

and if sencario multi-tenant, can refer document below detailed info:

how sign in azure active directory (ad) user using multi-tenant application pattern


Comments

Popular posts from this blog

node.js - Node js - Trying to send POST request, but it is not loading javascript content -

javascript - Replicate keyboard event with html button -

javascript - Web audio api 5.1 surround example not working in firefox -