What is the Microsoft authentication scheme for ASP.NET Core?

Question

I'm setting up a social sign-in provider authentication without ASP.NET Core Identity with a Microsoft authentication. The linked tutorial uses Google as an example and provides the code to get its authentication scheme for the DefaultChallengeScheme.

What is the authentication scheme for Microsoft? I've been unable to find it.

My Startup.cs > ConfigureServices method:

public void ConfigureServices(IServiceCollection services)
{
    //set up using this tutorial https://learn.microsoft.com/en-us/aspnet/core/security/authentication/social/social-without-identity?view=aspnetcore-2.2
    services
        .AddAuthentication(authenticationOptions =>
        {
            authenticationOptions.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
            authenticationOptions.DefaultChallengeScheme = //??? what goes here
        })
        .AddCookie()
        .AddMicrosoftAccount(microsoftOptions =>
        {
            microsoftOptions.ClientId = Configuration["Authentication:Microsoft:ClientId"];
            microsoftOptions.ClientSecret = Configuration["Authentication:Microsoft:ClientSecret"];
        });

    services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
}

Most likely possibility: authenticationOptions.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme; See learn.microsoft.com/en-us/aspnet/core/migration/1x-to-2x/… — Robert Harvey
– Robert Harvey, Commented Jul 8, 2020 at 15:06

Kirk Larkin · Accepted Answer · 2020-07-08 15:15:17Z

1

The literal value used for the authentication scheme is Microsoft. You can access this value using the constant MicrosoftAccountDefaults.AuthenticationScheme:

authenticationOptions.DefaultChallengeScheme = 
    MicrosoftAccountDefaults.AuthenticationScheme;

Here's the source for the constant:

public static class MicrosoftAccountDefaults
{
    public const string AuthenticationScheme = "Microsoft";

    // ...
}

answered Jul 8, 2020 at 15:15

Kirk Larkin

94.4k17 gold badges235 silver badges214 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Ankush Jain Over a year ago

Does it use cookie-based authentication under the hood? I mean, once user gets validated, how the state is persisted in MVC application? Though, I looked into the code but did not find any implementation for this Context.SignInAsync() for Microsoft auth scheme.

Collectives™ on Stack Overflow

What is the Microsoft authentication scheme for ASP.NET Core?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related