azure-samples / active-directory-dotnet-iwa-v2

.NET console application letting a user acquire a token for the Microsoft Graph using Integrated Windows Authentication (on domain joined or AAD joined machines)

Invoking an API protected by Microsoft identity platform with Integrated Windows Authentication, on a Windows domain joined or Microsoft Entra joined machine

This sample has been archived and is no longer being maintained. You can find a more recent version of this sample here

For access to the project files, please visit the branch archive.

Disclaimer

The sample in this repository is no longer maintained and is kept for historical reasons. The sample in the main branch is not guaranteed to work with the latest versions of the libraries it depends on.

active-directory-dotnet-iwa-v2's Issues

Failed to get user name

Please provide us with the following information:

This issue is for a: (mark with an x)

- [ ] bug report -> please search issues before submitting
- [ ] feature request
- [ ] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

Any log messages given by the failure

Expected/desired behavior

OS and Version?

Windows 7, 8 or 10. Linux (which distribution). macOS (Yosemite? El Capitan? Sierra?)

Versions

Mention any other details that might be useful

---

Thanks! We'll be in touch soon.

Issues with authentication

This issue is for a: (mark with an x)

- [ ] bug report -> please search issues before submitting
- [ ] feature request
- [x] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

1. Follow directions to install iwa-console app into AD for tenant microsoft.onmicrosoft.com
2. Run the VS sample app, see 'user has not consented to use application with ID ...'
3. Manually paste into browser, https://login.microsoftonline.com/common/Consent/Set?client-request-id=..., substituting in appropriate application-id.

Any log messages given by the failure

Note: It looks like MSGraph user.read.all is not allowed without approval on tenant. PS script to create app didn't seem like it registered correctly, I manually added MSGraph permissions after the script created the app. I also tried following the manual app creation steps, that didn't seem to include any redirect URLs in those instructions, so there was nowhere for the token auth flow to go...

Request Id: 7d3a0df3-d8d9-4185-bdb6-e8cfcca01500
Correlation Id: e20f1239-9fba-4b66-b78e-4193217deae9
Timestamp: 2022-05-26T17:11:53Z
Message: AADSTS500119: Redirect URIs with urn: schemes are prohibited. Use a different scheme, or https://login.microsoftonline.com/common/oauth2/nativeclient

Expected/desired behavior

Authenticated!

OS and Version?

Win 11 Enterprise managed by microsoft.onmicrosoft.com tenant.

Versions

Mention any other details that might be useful

Contact info: [email protected]

---

Thanks! We'll be in touch soon.

Error while copying content to a stream

This issue is for a: (mark with an x)

- [x] bug report -> please search issues before submitting
- [ ] feature request
- [ ] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

I cloned the project to local and I edited the ClientId in appsettings file. Using user in AAD joined machine

Any log messages given by the failure

Error while copying content to a stream.

OS and Version?

Windows 10

Mention any other details that might be useful

I run the project, but i can't get my information. I have tried adding the TenantId but doesn't work.

---

Thanks! We'll be in touch soon.