Skip to content

Commit 5fc5e04

Browse files
authored
Addressing customer questions (#203)
* Addressing customer questions * Adding instructions * fix capitals
1 parent 5c0faad commit 5fc5e04

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

3-WebApp-multi-APIs/README.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -189,6 +189,8 @@ insert
189189

190190
## Troubleshooting
191191

192+
To access Azure Resource Management (ARM), you'll need a work or school account (AAD account) and an Azure subscription. If your Azure subscription is for a Microsoft personal account, just create a new user in your directory, and use this user to run the sample
193+
192194
OpenIdConnectProtocolException: Message contains error: 'invalid_client', error_description: 'AADSTS650052: The app needs access to a service (\"https://*.blob.core.windows.net\") that your organization \"*tenantname*.onmicrosoft.com\" has not subscribed to or enabled. Contact your IT Admin to review the configuration of your service subscriptions.
193195
this is because the AzureStorage API was not registered as an API used by your Web App
194196

@@ -198,4 +200,4 @@ You can learn more about the tokens by looking at the following articles in MSAL
198200

199201
- The [Authorization code flow](https://aka.ms/msal-net-authorization-code), which is used, after the user signed-in with Open ID Connect, in order to get a token and cache it for a later use. See [TokenAcquisition L 107](https://github.com/Azure-Samples/active-directory-aspnetcore-webapp-openidconnect-v2/blob/f99e913cc032e16c59b748241111e97108e87918/Extensions/TokenAcquisition.cs#L107) for details of this code
200202
- [AcquireTokenSilent](https://aka.ms/msal-net-acquiretokensilent ), which is used by the controller to get an access token for the downstream API. See [TokenAcquisition L 168](https://github.com/Azure-Samples/active-directory-aspnetcore-webapp-openidconnect-v2/blob/f99e913cc032e16c59b748241111e97108e87918/Extensions/TokenAcquisition.cs#L168) for details of this code
201-
- [Token cache serialization](msal-net-token-cache-serialization)
203+
- [Token cache serialization](msal-net-token-cache-serialization)

4-WebApp-your-API/README.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -417,6 +417,10 @@ In the left-hand navigation pane, select the **Azure Active Directory** service,
417417
> NOTE: Remember, the To Do list is stored in memory in this TodoListService sample. Azure Web Sites will spin down your web site if it is inactive, and your To Do list will get emptied.
418418
Also, if you increase the instance count of the web site, requests will be distributed among the instances. To Do will, therefore, not be the same on each instance.
419419
420+
## Next steps
421+
422+
If you're interested in the Web API calling a downstream API, you might want to have a look at the [ASP.NET Core Web API tutorial](https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2), in chapter 2 [2. Web API now calls Microsoft Graph/](https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2/tree/master/2.%20Web%20API%20now%20calls%20Microsoft%20Graph). The client is a desktop app there, whereas you have a Web App, but apart from that all the app registration steps apply.
423+
420424
## Community Help and Support
421425
422426
Use [Stack Overflow](http://stackoverflow.com/questions/tagged/msal) to get support from the community.

0 commit comments

Comments
 (0)