I have an application in Vue.js that obtains user/bearer tokens using oidc-client that gives information about the usergroups in a particular Enterprise Application in Azure AD, the current logged in user is part of. We have used the following as the scope scope: `openid email profile api://${APP_CLIENT_ID}/user_access' where APP_CLIENT_ID is the corresponding app registration application/client id. Now we are trying to implement the same from a desktop client app using MSAL but using the same scope with or without the "/.default" suffix provides errors. Also, have tried using "api://Resource URI/.default", which gives the token but does not provide any info on app Usergroups. What should be the correct scope that needs to be used to get the info or is there any other alternative to this?
Getting Azure AD Enterprise Application user group in jwt token using MSAL in C#
764 Views Asked by user9057272 At
1
There are 1 best solutions below
Related Questions in .NET
- What is the point of definnig Asp.net Intrinsic Objects In different places and what is the different betwen them?
- how to prepend www if the url string does not has www?
- @Value annotation not resolved in a class that belongs to dependency jar
- referral link isn't being locked to one ip
- Under what conditions does href="#" cause scrolling to the top of the page?
- Webpage - Font size of table items on mobile phone browsers changes
- Web Service Error path property must set before calling the send method
- Calling ASP webpage from C# application
- What is the best way to make two web pages communicate between each other back and forth?
- CSS Different screen resolution
Related Questions in AZURE-ACTIVE-DIRECTORY
- What is the point of definnig Asp.net Intrinsic Objects In different places and what is the different betwen them?
- how to prepend www if the url string does not has www?
- @Value annotation not resolved in a class that belongs to dependency jar
- referral link isn't being locked to one ip
- Under what conditions does href="#" cause scrolling to the top of the page?
- Webpage - Font size of table items on mobile phone browsers changes
- Web Service Error path property must set before calling the send method
- Calling ASP webpage from C# application
- What is the best way to make two web pages communicate between each other back and forth?
- CSS Different screen resolution
Related Questions in AZURE-AD-MSAL
- What is the point of definnig Asp.net Intrinsic Objects In different places and what is the different betwen them?
- how to prepend www if the url string does not has www?
- @Value annotation not resolved in a class that belongs to dependency jar
- referral link isn't being locked to one ip
- Under what conditions does href="#" cause scrolling to the top of the page?
- Webpage - Font size of table items on mobile phone browsers changes
- Web Service Error path property must set before calling the send method
- Calling ASP webpage from C# application
- What is the best way to make two web pages communicate between each other back and forth?
- CSS Different screen resolution
Related Questions in AZURE-OAUTH
- What is the point of definnig Asp.net Intrinsic Objects In different places and what is the different betwen them?
- how to prepend www if the url string does not has www?
- @Value annotation not resolved in a class that belongs to dependency jar
- referral link isn't being locked to one ip
- Under what conditions does href="#" cause scrolling to the top of the page?
- Webpage - Font size of table items on mobile phone browsers changes
- Web Service Error path property must set before calling the send method
- Calling ASP webpage from C# application
- What is the best way to make two web pages communicate between each other back and forth?
- CSS Different screen resolution
Related Questions in MSAL
- What is the point of definnig Asp.net Intrinsic Objects In different places and what is the different betwen them?
- how to prepend www if the url string does not has www?
- @Value annotation not resolved in a class that belongs to dependency jar
- referral link isn't being locked to one ip
- Under what conditions does href="#" cause scrolling to the top of the page?
- Webpage - Font size of table items on mobile phone browsers changes
- Web Service Error path property must set before calling the send method
- Calling ASP webpage from C# application
- What is the best way to make two web pages communicate between each other back and forth?
- CSS Different screen resolution
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
To fetch the Azure AD group the current logged in user is part of, check the below:
Assign
GroupMember.Read.All
API permission to the Azure AD Application.Now, generate access token to call Graph API via Postman like below:
To get the Azure AD group the current logged in user is part of, use the below query:
To fetch the groups assigned to the Azure AD Application, check the below:
Add optional claim in the Azure AD Application:
Now, I generated tokens via Postman using below parameters:
When I decoded the token, the groups added to the Application are displayed like below: