Windows Azure Active Directory Application Setup

Question

I have created WAAD application with several reply urls, e.g.

https://localhost:4444/Search

https://server/Search

https://stage.company.com/Search

https://production.company.com/Search

I am using WSFederationAuthencationModule.CreateSignInRequest method and passing in the reply URL based upon where the code is being executed

    public ActionResult Federated()
    {
        var module = FederatedAuthentication.WSFederationAuthenticationModule;
        var scheme = Request.Url.Scheme;
        var replyUrl = Url.Action("Index", "Search", null, scheme);
        var requestMessage = module.CreateSignInRequest(Guid.NewGuid().ToString(), replyUrl, true);
        return new RedirectResult(requestMessage.RequestUrl);
    }

It seems that the code always redirects to the last Reply URL that I modified in the UI. It seems when you modify the Reply Url it is placed first in the manifest only that Reply Url is used.

Is my understanding Reply URL flawed?

Dushyant Gill · Accepted Answer · 2014-05-14 05:54:08Z

1

I used your code in my project but wasn't able to reproduce the issue. The method that you are using produces a WSFed SSO request that contains the replyUrl encoded in the wctx parameter (pass the below SSO request produced by your code via a URL decoder and you'll see the encoded ru).

https://login.windows.net/dushyantgill.com/wsfed?wa=wsignin1.0&wtrealm=https%3a%2f%2fdushyantgill.com%2fWSFedTest&wctx=rm%3d1%26id%3d01b22db4-bfdc-4efd-abb5-2909cf445a51%26ru%3dhttps%253a%252f%252flocalhost%253a44311%252fHome%252fAbout&wct=2014-05-14T05%3a37%3a01Z

The OnAuthenticateRequest handler of the authentication module after processing the response, extracts the replyUrl from the wctx and redirects the user's agent. See http://msdn.microsoft.com/en-us/library/system.identitymodel.services.wsfederationauthenticationmodule.onauthenticaterequest(v=vs.110).aspx

Can you confirm that you have a SessionAuthenticationModule in the pipeline too. Finally, you can always construct your owner WSFed SSO request, with an explicit WReply parameter with one of the reply URLs that you have configured with your application in AAD.

Hope this helps.

answered May 14, 2014 at 5:54

Dushyant Gill

4,00421 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Haroon Over a year ago

I don't think the issue that I was trying to describe was that replyUrl is incorrect. Its seems that Azure AD doesnt use it on the redirect. Unless I missunderstand you repspne. Just to clarify, when is the replyUrl used by Azure AD?

Haroon Over a year ago

Also, I can confirm that I have SessionAuthenticationModule in the pipeline too

derek · Accepted Answer · 2014-08-14 13:24:56Z

0

What worked for me was setting the passiveRedirectEnabled to true in the config file. Then the returnUrl parameter in the FederatedAuthentication.WSFederationAuthenticationModule.CreateSignInRequest call worked!

  <wsFederation passiveRedirectEnabled="true" ....>

answered Aug 14, 2014 at 13:24

derek

16

Collectives™ on Stack Overflow

Windows Azure Active Directory Application Setup

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related