search

intelequia / dnn.azureadb2cprovider

The DNN Azure Active Directory B2C Provider is an Authentication provider for DNN Platform (formerly DotNetNuke) that uses Azure Active Directory B2C OAuth2 authentication to authenticate users.
MIT License
20 stars 9 forks source link

Error calling the graph api #18

Open alex-spa-au opened 4 years ago

alex-spa-au commented 4 years ago

Followed the instructions to a tee. The auth works a treat however the user management pops up with a auth error. Do i need to add any permissions for graph in B2C ad?

ckjacksoncda commented 3 years ago

I'm having the same issue - the AAD UI has changed from what's described in the documentation:

Click on the name of the app we've just created and then on "All settings" > "Required permissions" > "Windows Azure Active Directory". Ensure that the app has, at least, Sign in and read user profile checked, in the Delegated permissions section. Click on the Grant permissions button and then click on "Yes" to grant the permissions in all the accounts in the current directory.

That option doesn't exist. Instead, I have tried to apply the new Graph API permissions that should have taken its place (to the point of redundancy):

I continue to successfully authenticate but get the following authorization error:

Azure AD B2C Sync Starting Azure AD B2C Synchronization Error while synchronizing the roles from portal 0: System.Net.WebException: Error Calling the Graph API: { "odata.error": { "code": "Authorization_RequestDenied", "message": { "lang": "en", "value": "Insufficient privileges to complete the operation." }, "requestId": "236352d0-70af-43ed-bd22-f410a9d4328b", "date": "2021-04-02T17:47:11" } } at DotNetNuke.Authentication.Azure.B2C.Components.Graph.GraphClient.SendAADGraphRequest(String api, String query, String body, HttpMethod httpMethod) at DotNetNuke.Authentication.Azure.B2C.Components.Graph.GraphClient.GetAllGroups(String query) at DotNetNuke.Authentication.Azure.B2C.ScheduledTasks.SyncSchedule.SyncRoles(Int32 portalId, AzureConfig settings)Azure AD B2C Synchronization finished successfully