ASP.NET MVC Windows Azure Organization Authentication

Question

I am trying to configure organization authentication in an ASP.NET MVC project in Visual Studio 2013 RC. After filling in the data in the project creation dialog box, as indicated in the Microsoft instructions, I get an error message that says that the configuration failed. I also tried to do this in Visual Studio 2012 using an authentication addon.

Perhaps this is due to Windows Azure AD?

Here is the error I get:

Hope someone knows how to fix this problem. Thanks for any help and suggestion!

Answer 1

This question is old, but today I found a workaround that I would like to share.

It looks like we cannot use the Microsoft account when we use WAAD.

So:

• Create WAAD.
• Add admin
  • Select a local directory account , not a Microsoft account .
  • Grant this account global administrator permissions.
• Open Visual Studio and create a new web project.
• Select "Organization Accounts" for authentication.
• Specify the WAAD URL (for example, " [e-mail] ").
• When you need to insert a user and password, use the name and password of the local account. for example (" [e-mail] ").

This will allow you to pass the error.

Edit: Microsoft published a post that talked about this problem and showed a solution (described above). http://www.cloudidentity.com/blog/2013/12/11/setting-up-an-asp-net-project-with-organizational-authentication-requires-an-organizational-account/

Answer 2

I would look at two things:

• The account used to log on to Windows Azure and has the global administrator role in AAD
• The application identifier URI specified in the project creation dialog box is valid. The valid application identifier URI for the domain mydomain.onmicrosoft.com is in the format https://mydomain.onmicrosoft.com/uniqueUri . Please note that you can leave this field blank and the tool will automatically select the correct application identifier identifier for you.

If these two things do not help, I would advise you to run DebugView ( http://technet.microsoft.com/en-us/sysinternals/bb896647.aspx ) in the background when you try to create a similar project, and you can see the actual message about error in trace in DebugView.

Answer 3

Following OzB:

As soon as you configure the user in AAD according to the OzB account, note that you must also go to "Settings" in Azure and add this account as the administrator of the Azure subscription, otherwise you will not be able to download the site itself.