How to Implement Azure AD in Existing .Net MVC based System
How to Implement Azure AD in Existing .Net MVC based System
Schema design & overall planning to implement Azure AD:
Moreover, we need to
1) login with admin user and Create One User under AzureAd as well as one user under system. Please follow this link that explains how to set up and create Azure AD. Link
2) Make an entry under above table.
3) Fetch details including ClientId,Domain,TenentId,PostBackURL from Azure AD account
Once all above details are ready we are good to modify current .net MVC application. Here first and most important thing to note down is we need to remove any .net based authentication we have used mainly because we can not maintain two authentication simulteneously.
Step 1 : Modify Existing Login
Firstly we need to modify existing login routine and make sure we write logic to verify user against Azure Active directory. This woudl be done under startup.cs by implementing OpenId authentication. Below is a screenshot the Oauth2 based authentication.
Step 2:
Wherever we have Authentication check we can check almost in the same way here is a screen shot that validates if loggedin user is authenticated or not.
Step 3: Modify Logout routine.
As per above screen shot we need to modify logout routine and make sure system logs out from Active directory sign in.
Step 4: Implement a custom Authorization filter and apply that
We need to modify and override default Authorize attribite and create a custom Authorization filter.
