CODEWITHSUNDEEP
angularjsazuresingle-sign-onazure-active-directoryadal
Jamsheer
Jamsheer

Reputation: 3753

Parse user group information from Azure token?

I am working with Angular JS and now I need to authenticate my application with Azure AD SSO .

Currently, I implemented same with adal-angular. Now apart of my requirement I need to parse user group information form the JWT token which I got after successful authentication(I am passing this token to my backend service and there I need to parse it)

I came to know that azure adal-angular implementation is not sending group information, reference available here.

Any suggestion please and thanks in advance.

Upvotes: 0

Views: 991

Answers (1)

Nan Yu
Nan Yu

Reputation: 27528

you can set groupMembershipClaims to "SecurityGroup" or "All" in your app's manifest in AAD , then you can receive the users' group memberships in the id token (which gives you the user's name etc) . Please refer to document for more details.

Please refer to code sample :https://github.com/Azure-Samples/active-directory-angularjs-singlepageapp . To get group claims , update UserData.html to get ids of groups :

<p ng-repeat="value in userInfo.profile.groups">{{value}}</p>

Another way is getting group memberships from Microsoft Graph API :

POST https://graph.microsoft.com/v1.0/me/getMemberGroups
Content-type: application/json
Content-length: 33

{
  "securityEnabledOnly": true
}

For how to call an Azure AD protected Web API(microsoft graph in your scenario) in an AngularJS Single Page App . Please refer to code sample :https://github.com/Azure-Samples/active-directory-angularjs-singlepageapp-dotnet-webapi

Upvotes: 2

Related Questions