how can i get all these information from azure active directory ?AAD generate app id only

[subhans3tech]

const AZUREAD_APP_PASSWORD = envx("AZUREAD_APP_PASSWORD");
const AZUREAD_APP_REALM = envx("AZUREAD_APP_REALM");
const AUTHBOT_CALLBACKHOST = envx("AUTHBOT_CALLBACKHOST");
const AUTHBOT_STRATEGY = envx("AUTHBOT_STRATEGY");

[ritazh]

If you are using AAD endpoint v2, you can register an application in the new application registration portal under https://apps.dev.microsoft.com. This is where you set/get the values for AZUREAD_APP_PASSWORD, AZUREAD_APP_ID, and redirectUrl.

For AZUREAD_APP_REALM, unless you are using a v2 tenant-specific endpoint, use common.

For AUTHBOT_CALLBACKHOST, this should be the callback host of the redirect url you specify for the new application, for example: redirectUrl: AUTHBOT_CALLBACKHOST + '/api/OAuthCallback'.

For AUTHBOT_STRATEGY, this should be oidStrategyv2 for AAD endpoint v2 and oidStrategyv1 for AAD endpoint v1.

I'm using the passport-azure-ad node module, which has more information about how to use it for different AAD scenarios.

[subhans3tech]

I really appreciate your response but thisl ink https://apps.dev.microsoft.com has no linkage with azure active directory . this is just to register your app with microsoft . it does not show any options to integrate with active directory . secondly i am little confused login and logout url in simple app we give our page link . in bot case i am little bit confused

[sujaydutta]

Hi,

Having some initial setup issues. So in apps.dev.microsoft.com, we register the bot application if in the "Converged Applications" and that's where we get the MICROSOFT_APP_ID/PASSWORD FROM. I am clear on that.

If you can please clarify these, that would be awesome!

1. For the Azure AD related, can we use the same MICROSOFT_APP_ID or need to register an app under "Azure AD Only applications"?

2. If Generate cryptographically strong random number #1 is the case, then I can get the AZURE_AD_APP_ID and PASSWORD (from the key). Is that correct? What delegated permissions would be needed for AD authentication and also Sharepoint site access?

3. How can I tell what is the tenant version? Is that something in the Azure portal? You mentioned above to use "common" for v1 tenant, what should we use for v2 tenant?

4. I don't see where I can get the following, can you please give an example? Say my bot is hosted on "https://mytestbot.azurewebsites.net/api/messages".

AZUREAD_APP_REALM
AUTHBOT_CALLBACKHOST
AUTHBOT_STRATEGY

Thanks!

[ritazh]

@sujaydutta
Assuming you are using v2.

1. Yes you can use the same APP ID and Password for MICROSOFT_APP_ID/PASSWORD and AZURE_AD_APP_ID/PASSWORD
2. See 1.
3. Pleaser refer to https://github.com/AzureAD/passport-azure-ad#5112-options to see what makes sense for your application.
4. Given your sample and assuming you are using v2:

AZUREAD_APP_REALM = common
//Depending on what you have for 3, it could be "common" or "your_tenant_name.onmicrosoft.com"
AUTHBOT_CALLBACKHOST = https://mytestbot.azurewebsites.net
AUTHBOT_STRATEGY = oidStrategyv2

[sujaydutta]

Thanks @ritazh, that helped. Once think I had to do is to login to https://apps.dev.microsoft.com and for the bot application, add a web platform and the redirect URL of the bot, i.e. https://mytestbot.azurewebsites.net Otherwise the redirect wasn't working correctly.

BTW do you have any experience getting the access token for O365 Sharepoint site, on a related topic, I am getting some error most likely with the resource parameter used in the access token. If you can guide me to a good link that will be helpful.

[sujaydutta]

I have another issue now, during authentication I get this error.

AADSTS70001: Application '83xxxxxxx' is not supported for this API version.

[kanishk-mehta]

@sujaydutta same here.. :(

[ritazh]

What's the error you are seeing? I assume you created the app here: https://apps.dev.microsoft.com ?

[kanishk-mehta]

My bot is hosted on https://gdcchatbot-trillan-dev.azurewebsites.net/

Have tried the following permutations of creating the app:
Error Type 1: App created on https://apps.dev.microsoft.com, Redirect URL: https://gdcchatbot-trillan-dev.azurewebsites.net/, AUTHBOT_STRATEGY: oidStrategyv2 or oidStrategyv1

Error Type 2: App created on https://apps.dev.microsoft.com, Redirect URL: https://gdcchatbot-trillan-dev.azurewebsites.net/api/OAuthCallback, AUTHBOT_STRATEGY: oidStrategyv2 or oidStrategyv1
Here I get a 404 error - No webpage was found for the web address.

Error Type 3: App created on https://portal.azure.com, Reply URL: https://gdcchatbot-trillan-dev.azurewebsites.net/, AUTHBOT_STRATEGY: oidStrategyv1

Error Type 4: App created on https://portal.azure.com, redirect URL: https://gdcchatbot-trillan-dev.azurewebsites.net/api/OAuthCallback, AUTHBOT_STRATEGY: oidStrategyv2

[ritazh]

One obvious thing is you should configure your redirect url to match whatever is in the code:

server.get('/api/OAuthCallback/'

https://github.com/CatalystCode/node-authbot/blob/master/app.js#L78

let oidStrategyv2 = {
  redirectUrl: AUTHBOT_CALLBACKHOST + '/api/OAuthCallback',

https://github.com/CatalystCode/node-authbot/blob/master/app.js#L106

Here is what I have for your reference:

AZUREAD_APP_REALM = common
AUTHBOT_CALLBACKHOST = https://authbot.azurewebsites.net
AUTHBOT_STRATEGY = oidStrategyv2

From the https://apps.dev.microsoft.com portal:

"identifierUris": [
        "https://authbot.azurewebsites.net/login"
    ],
...
"replyUrls": [
        "https://authbot.azurewebsites.net/api/OAuthCallback"
    ],

[kanishk-mehta]

Thank you @ritazh ..That clarified some of my doubts.. I've followed all the other points but am stuck on the last point you mentioned. I couldn't find "identifierUris" or "replyUrls" in the https://apps.dev.microsoft.com portal .. I could only find 'Redirect URLs' and 'LogoutURL' (when I add a web platform)

I'm sure I'm missing something or doing something wrong...Could you please guide me as to where I can/should add/edit the "identifierUris" and "replyUrls" on the https://apps.dev.microsoft.com portal

[ritazh]

Redirect URLs in this form will resolve to replyUrls in the manifest.

[kanishk-mehta]

Oh. Understood. Tried that but it resulted in the 'Error Type 2' that I mentioned earlier (404 - no web page was found).
After the Sign-in screen and after authenticating the bot, I was redirected to this URL (which gave me the 404 error):
https://gdcchatbot-trillan-dev.azurewebsites.net/api/OAuthCallback?code=OAQABAAIAAAA9kTklhVy7SJTGAzR-p1BcRaS5WQYxLie7VdGRqiwiJ_UhUa_i3BoqeBLmvAeTGhosuOZKDRfT7ZLgyhmJGLvk2xH1eMlsChV512JK7fYDabJZ1TXImPrOAZeZGD7wbRJcS5h920FsZXsi1_3FkR88SM5eViR2x7gxBdvTyh6fd2Y33G-3FLFaoMPoWZZyT6xbDDE26M2jXiuqKPRgll4R6UYFzDrJpvwcfoFciKH1NDEUE7xyVAr0zB1124faw4zw3pPEwB_elOx9tMK8MnURaStrNB2CIEtIen8kEfF86wjQP2dgq-XeTj5fsFpYKMh5iFwGKMRnPDX3OHZzvP3nl6rJuG4AAWRQIuVw5olPMwzAFIRQkEh7T0vFHONv2mp53q2v5PXsmZIdbD-tGUEjluwvwhxfSvfr799rnXN6KAA1JlxqqMD1-vI9hzMZ5QTDYxq8COllMxhaXFMzg6ML6EHqyq2Fr3nrEwn6QdVberIQ2EoE8gr355lvPPiWd757qTm7hjlLRVh0MNZ2JADSJVoieyaHa9f59ApiJT4abO4ng785NRFHUfrwd4BsXbR4e8eAGMx9pcWyeRUJXlIPiHWeV9MNpL-4wef6nHs9yaYEPahf1SnaOzM5DBP3jaqtnKk7lruvWGCwGSM3GFtDjmR01ZQSF00Gp80msa1QYaiSOT0JEtYLdoHWH18Iq25T3prqe8Fiitu0ku_wXv2b-_X_ttRWyv7qXgBYUwGB3dD0z6koS_6joS0IRtyONeSzdZRYSmaOWD_dXVOemnsOBrp5vsJ00Otiy4gTMC_iK49uQIB53e6FnwUVeB2CwLiS9nygasmXQ02JY5V9MjDbIAA&state=CUSTOMdFZFfht9t6y4lbVu0_u5LIVFaU3R6ceC%7b%22id%22%3a%22f375b8b6f8c74ecd806051a55594e3fb%7c0000001%22%2c%22channelId%22%3a%22webchat%22%2c%22user%22%3a%7b%22id%22%3a%228WPGoWSAmfr%22%2c%22name%22%3a%22You%22%7d%2c%22conversation%22%3a%7b%22id%22%3a%22f375b8b6f8c74ecd806051a55594e3fb%22%7d%2c%22bot%22%3a%7b%22id%22%3a%22Trillian_Dev%40TwWICOtqpRE%22%2c%22name%22%3a%22Trillian_dev%22%7d%2c%22serviceUrl%22%3a%22https%3a%2f%2fwebchat.botframework.com%2f%22%2c%22useAuth%22%3atrue%7d&session_state=4ee838b0-d649-4656-a743-a68f795e82e0

[kanishk-mehta]

Hi @ritazh ..I resolved the issue. Sorry couldn't revert earlier but i've managed to sort the issue out now. Somehow I missed this part in the bot setup instructions:

• [Optional] If the bot is hosted on Azure App Service, make sure to increase the maxQueryString limit by updating the web.config file in $HOME/site/wwwroot like this:

<security>
	  <requestFiltering>
	  	<requestLimits maxQueryString="10000"/>
	  	...
	  </requestFiltering>
</security>

Did that. Double checked the web.config file and everything is working now. Thanks for the help!

---

Also, for users who are deploying the bot on a website, if they want the user to receive the authentication code in html format (since some browsers don't support JSON..like IE) to improve user experience:

Replace res.send('Welcome ' + req.user.displayName + '! Please copy this number and paste it back to your chat so your authentication can complete: ' + magicCode); (line num 91 in app.js) with

var body = '<html><body>Welcome ' + req.user.displayName + '! Please copy this number and paste it back to your chat so your authentication can complete: ' + magicCode'</body></html>';        
        
res.writeHead(200, {
            'Content-Length': Buffer.byteLength(body),
            'Content-Type': 'text/html'
        });
        
res.write(body);
        
res.end();

Thought it might help. Will add a pull request as well. Thanks again..

[EnnamGopaulen]

Hello @ritazh,

I'm having some issues for making this works.

Some help would be appreciated.

Steps that I have followed:

1. I have clone node-authbot and install dependencies

2. I have registered the bot on https://apps.dev.microsoft.com, where the MICROSOFT_APP_ID and MICROSOFT_APP_PASSWORD have been generated and a web platform has been added with the redirect URL of the bot (as mentioned in the thread) : https://the-bot.azurewebsites.net/api/OAuthCallback

3. I have created a new web app and linked the application (github) on Microsoft Azure and inserted the MICROSOFT_APP_ID and MICROSOFT_APP_PASSWORD under the application settings.

4. Based on previous threads, I have populate the environment variables as display below:

MICROSOFT_APP_ID = MICROSOFT_APP_ID
MICROSOFT_APP_PASSWORD= MICROSOFT_APP_PASSWORD
AZUREAD_APP_ID = MICROSOFT_APP_ID
AZUREAD_APP_PASSWORD = MICROSOFT_APP_PASSWORD
AZUREAD_APP_REALM = common
AUTHBOT_CALLBACKHOST = http://the-bot.azurewebsites.net/
AUTHBOT_STRATEGY = oidStrategyv2

Error : There was an error sending this message to your bot: HTTP status code MethodNotAllowed

Maybe I have missed something. Can you please guide me?

@kanishk-mehta Hello Kanishk, Can you please help me. I saw you have a bot up and running with the authentication.

Thanks