Workaround with Configuration Section AzureAD

Hi all,

when using Microsoft.Identity.Web we usually inject all the necessary configuration with the following code:

services.AddMicrosoftIdentityWebAppAuthentication(Configuration, "AzureAd");

This works as long as a applicationConfig.json file is present.

If I publish my solution as an Azure Web Application I don´t want to use the applicationConfig.json file but rather the environment variables of the Web Application or KeyVault for storing secrets. Sadly the function AddMicrosoftIdentityWebAppAuthentication does not support this.

Is there a possiblity to not having the “AzureAD” section present or the read all the necessary information from env variables and KeyVault, build the configurationObject by myself and then load it into the method?

Any help would be highly appreciated!

Thanks a lot!

Tom

[MarcAnnous]

It does work this way:

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddMicrosoftIdentityWebApi(options => {}, options =>
    {
        options.Instance = instance;
        options.Domain = domain;
        options.TenantId = tenantId;
        options.ClientId = clientId;
        options.SignUpSignInPolicyId = signUpSignInPolicyId;
        options.CallbackPath = new PathString("/signin-oidc");
        options.SignedOutCallbackPath = new PathString("/signout-callback-oidc");
    });

@jmprieur I was confused about having to pass to AddMicrosoftIdentityWebApi something for configureJwtBearerOptions (doing nothing) in addition to configureMicrosoftIdentityOptions whereas AddMicrosoftIdentityWebApp takes only configureMicrosoftIdentityOptions which is enough.

[jmprieur]

@spotnick The way to do is to use AddAuthentication followed by a different override of AddMicrosoftIdentityWebApp which takes delegates:

 services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
             .AddMicrosoftIdentityWebApp(microsoftIdentityOptions=>
             {
               options.ClientId = GetClientIdFromEnvironmentVariable();
               options.TenantId = GetClientIdFromEnvironmentVariable();
               options.ClientSecret = GetClientSecretFromKeyVault();
               /// etc ...              
             })