CODEWITHSUNDEEP
asp.net-web-apiazure-active-directory
user1387192
user1387192

Reputation: 47

We we need to create two AAD Apps for front end and backend?

I am implementing single sign on with Azure Active Directory. The front end is in Angular and back end is in .net core WebApi.

I saw and example that you have to create two AAd apps one for front end and one for back end why we have to create two apps?

Upvotes: 2

Views: 434

Answers (1)

juunas
juunas

Reputation: 58733

The main reason you define two apps is so that you can acquire and use an access token with the API. Without that, you could only use an Id token, which should not be used for authorization in an API. An Id token is only meant for the client that triggered the login. When calling an API, you should use an access token for that API.

Upvotes: 1

Related Questions