Adding a web API for Single Sign-On (SSO) Developing and calling a web API that leverages Azure AD basically entails for the following steps: Registering the web API in the directory tenant. Configuring the web API project for Azure AD. Defining the web API application roles and permissions. Enabling the client application to access the web API. Registering the web API in the directory tenant As before with a web application, the directory tenant administrator creates the service principal at behest of developer. To register a web API, proceed with the following steps: Sign into the Azure management portal as the administrator of the directory to configure. Click ACTIVE DIRECTORY on the left menu, and then click the name of the organization’s directory for which you want to register the web API. On the top menu, click APPLICATIONS. If no apps have been added to your directory, this page will only show the ADD AN APP link. Click on the link, or alternatively you can click ADD at the tray of the bottom. A What do you want do? dialog brings up. Click Add an application my organization is developing. On the Tell us about your application page, specify a user friendly name for your web API. This name will enable it to be easily identified when looking at registered client applications in your directory. Select WEB APPLICATION AND/OR WEB API. Click the arrow icon on the bottom-right hand corner of the page. On the App properties page, provide the information for the web API. Specify the address of the web API in APP URL, as well as in APP ID URI to logically identify the web API. Note With a web application, the address specified in APP URL is used to know to where the token representing successful authentication should be sent. In the case of a web API, however, the return URL is handled by the client of the web API. Hence, you can enter here whatever valid URL you like and that won’t have impact on the process. This said, this is usually a good idea to put the correct URL anyway, given that you never know how you’ll want to evolve this web API in the future... Click the check mark icon on the bottom-right hand corner of the page. You are redirected to the Quick Start page for the web API. At this point, your web API is now listed among the other registered applications of your directory. Let’s configure it for Azure AD.
Adding a web API for Single Sign-On (SSO) Developing and calling a web API that leverages Azure AD basically entails for the following steps: Registering the web API in the directory tenant. Configuring the web API project for Azure AD. Defining the web API application roles and permissions. Enabling the client application to access the web API. Registering the web API in the directory tenant As before with a web application, the directory tenant administrator creates the service principal at behest of developer. To register a web API, proceed with the following steps: Sign into the Azure management portal as the administrator of the directory to configure. Click ACTIVE DIRECTORY on the left menu, and then click the name of the organization’s directory for which you want to register the web API. On the top menu, click APPLICATIONS. If no apps have been added to your directory, this page will only show the ADD AN APP link. Click on the link, or alternatively you can click ADD at the tray of the bottom. A What do you want do? dialog brings up. Click Add an application my organization is developing. On the Tell us about your application page, specify a user friendly name for your web API. This name will enable it to be easily identified when looking at registered client applications in your directory. Select WEB APPLICATION AND/OR WEB API. Click the arrow icon on the bottom-right hand corner of the page. On the App properties page, provide the information for the web API. Specify the address of the web API in APP URL, as well as in APP ID URI to logically identify the web API. Note With a web application, the address specified in APP URL is used to know to where the token representing successful authentication should be sent. In the case of a web API, however, the return URL is handled by the client of the web API. Hence, you can enter here whatever valid URL you like and that won’t have impact on the process. This said, this is usually a good idea to put the correct URL anyway, given that you never know how you’ll want to evolve this web API in the future... Click the check mark icon on the bottom-right hand corner of the page. You are redirected to the Quick Start page for the web API. At this point, your web API is now listed among the other registered applications of your directory. Let’s configure it for Azure AD.