Reputation: 14159
I am using solution mentioned here to get all users from Active Directory however I suspect the code is pulling disabled users from our old Active Directory. The new one is Azure Active Directory. Please let me know what change is required to get below details of only active users from Azure Active Directory:
Upvotes: 0
Views: 1274
Reputation: 16066
Getting all users in Azure AD can use Microsoft Graph API. Here's the API for listing users. But it doesn't support personal
Microsoft account, it only supports work or school
accounts. By the way, I'm not sure what is Enterprise ID
, could you pls take a look at this section to check if this API contained it?
I assume you have an asp.net core WEB API which is used to getting user list. So you should use code like below.
using Microsoft.Graph;
using Azure.Identity;
var scopes = new[] { "https://graph.microsoft.com/.default" };
var tenantId = "tenant_name.onmicrosoft.com";
var clientId = "aad_app_id";
var clientSecret = "client_secret";
var clientSecretCredential = new ClientSecretCredential(
tenantId, clientId, clientSecret);
var graphClient = new GraphServiceClient(clientSecretCredential, scopes);
var users = await graphClient.Users.Request().GetAsync();
Then an Azure AD application is required for the variables in code above. Pls follow this document to register the Azure AD app. Since my assumption is based on a web API, no need to add redirect URL here. Now we can get tenantId , clientId
in Overview
blade, and created the client secret. We also need to modify API permissions
blade and add required API permissions. What we need is Application
permission User.Read.All,User.ReadWrite.All,Directory.Read.All, Directory.ReadWrite.All
.
Upvotes: 2