Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/damienbod/aspnetcoremeidcae
Microsoft Entra ID Continuous Access in an ASP.NET Core Razor Page, Blazor app using a Web API
https://github.com/damienbod/aspnetcoremeidcae
aad azuread blazor cae continuousaccess dotnet microsoftidentity oauth oidc razoraspnetcore
Last synced: 2 months ago
JSON representation
Microsoft Entra ID Continuous Access in an ASP.NET Core Razor Page, Blazor app using a Web API
- Host: GitHub
- URL: https://github.com/damienbod/aspnetcoremeidcae
- Owner: damienbod
- License: mit
- Created: 2022-03-31T12:40:19.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2024-01-14T11:42:10.000Z (about 1 year ago)
- Last Synced: 2024-11-01T13:42:12.480Z (3 months ago)
- Topics: aad, azuread, blazor, cae, continuousaccess, dotnet, microsoftidentity, oauth, oidc, razoraspnetcore
- Language: C#
- Homepage: https://damienbod.com/2022/04/20/implement-azure-ad-continuous-access-evaluation-in-an-asp-net-core-razor-page-app-using-a-web-api/
- Size: 1.34 MB
- Stars: 15
- Watchers: 3
- Forks: 2
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
[](https://github.com/damienbod/AspNetCoreAzureADCAE/actions/workflows/dotnet.yml)
# Razor, Blazor Page Microsoft Entra ID Continuous Access
[Implement Microsoft Entra ID Continuous Access in an ASP.NET Core Razor Page app using a Web API](https://damienbod.com/2022/04/20/implement-azure-ad-continuous-access-evaluation-in-an-asp-net-core-razor-page-app-using-a-web-api/)
[Implement Microsoft Entra ID Continuous Access (CA) step up with ASP.NET Core Blazor using a Web API](https://damienbod.com/2022/05/23/implement-azure-ad-continuous-access-evaluation-cae-step-up-with-asp-net-core-blazor-using-a-web-api/)
[Implement Microsoft Entra ID Continuous Access (CA) standalone with Blazor ASP.NET Core](https://damienbod.com/2022/05/30/implement-azure-ad-continuous-access-evaluation-cae-standalone-with-blazor-asp-net-core/)
[Force MFA in Blazor using Microsoft Entra ID and Continuous Access](https://damienbod.com/2022/06/13/force-mfa-in-blazor-using-azure-ad-and-continuous-access/)
[Force phishing resistant authentication in an ASP.NET Core application using Microsoft Entra ID ](https://damienbod.com/2022/10/10/force-phishing-resistant-authentication-in-an-asp-net-core-application-using-azure-ad/)
# History
- 2024-01-14 Updated packages, improved security headers
- 2023-11-04 Updated packages, fixed security headers
- 2023-08-06 Updated packages
- 2023-04-29 Updated packages, some style fixes
- 2023-02-19 Updated to .NET 7
- 2022-10-09 Updated packages
- 2022-09-11 Updated packages
- 2022-06-13 Force MFA authn from an APP
- 2022-05-23 Improve code in Blazor applications
- 2022-05-20 Add standalone samples
- 2022-05-13 Add CAE Blazor example
- 2022-05-08 Update packages
- 2022-04-16 Update packages
- 2022-04-05 Added CAE admin tool using Microsoft Graph
- 2022-04-03 initial version
## Azure app registration manifest access token
```json
"optionalClaims": {
"idToken": [],
"accessToken": [
{
"name": "xms_cc",
"source": null,
"essential": false,
"additionalProperties": []
}
],
"saml2Token": []
},
```
## Azure app registration manifest id_token
```json
"optionalClaims": {
"idToken": [
{
"name": "xms_cc",
"source": null,
"essential": false,
"additionalProperties": []
}
],
"accessToken": [],
"saml2Token": []
},
```
## Claims challenge returned from the API
```json
{"access_token":{"acrs":{"essential":true,"value":"c1"}}}
```
## Access token
```csharp
{
"aud": "7c839e15-096b-4abb-a869-df9e6b34027c",
"iss": "https://login.microsoftonline.com/5698af84-5720-4ff0-bdc3-9d9195314244/v2.0",
"iat": 1648841224,
"nbf": 1648841224,
"exp": 1648845383,
"acrs": [
"c1"
],
"azp": "7c839e15-096b-4abb-a869-df9e6b34027c",
"azpacr": "1",
"ver": "2.0",
"xms_cc": [
"cp1"
],
// plus more claims
}
```
## Links
https://github.com/Azure-Samples/ms-identity-ca-auth-context
https://github.com/Azure-Samples/ms-identity-dotnetcore-ca-auth-context-app
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
https://github.com/Azure-Samples/ms-identity-dotnetcore-daemon-graph-cae
https://docs.microsoft.com/en-us/azure/active-directory/develop/developer-guide-conditional-access-authentication-context
https://docs.microsoft.com/en-us/azure/active-directory/develop/claims-challenge
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-conditional-access-dev-guide
https://www.youtube.com/watch?v=_iO7CfoktTY
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-continuous-access-evaluation
https://openid.net/wg/sse/
https://github.com/damienbod/Blazor.BFF.AzureAD.Template
https://github.com/AzureAD/microsoft-identity-web