Skip to main content

Secure Azure Function App with Azure Active Directory (AD). [Token based access]

Welcome to BigDataStacks. This blog is regarding how we can secure azure function app with azure active directory. So when we will try to access function app it will ask for login. I also elaborate on how we can access the function URL with the access token. 

Let's start. 
  1. Configure Function App
  • Create an Azure Function app with anonymous access.
  • Go to function app's 'Authentication / Authorization' section from 'Platform features'.
  • Turn on App service Authentication/Authorization section.
  • Select action 'Login with Azure AD'
  • Click on Azure AD from Auth provider.
  • Select 'Express' and 'create a new AD app' then click on OK.
  • Click on 'Save'.
  • Again open screen where we selected 'Express mode'.
  • Now Select 'Advanced'. Copy 'clientId' which will be used later. NOTE: If clientId is not showing then refresh the page then it will display. 
  • Add one more entry in 'Allowed Token Audience'. eg. https://{your-function-app-name}.azurewebsites.net
  • click on 'ok' then 'save'.
  1. App Registration
  • Search for Azure Active Directory service.
  • Go to 'App Registration'.
  • Click on 'New App Registration'.
  • Enter app name like 'clientApp'. Enter function app URL in redirect URIs.
  • Now go to 'Overview' then copy 'Application (client) ID' & 'Directory (tenant) ID' which will be used to generate tokens.  
  • Click on 'Certificates & secrets' and add new client secret. It will generate a random secret. copy this 'client-secret'.
  • Go to API Permissions -> Add Permission -> My APIs -> click on your function app -> give required Delegated permissions

  1. Test our configuration

Now our function is secured with azure directory. when you will try to access your function app url then it requires login with active directory.

We can also call our function app by fetching token and pass this token to access function app.

let's do this.

We have all the required data to fetch token eg. clientId, secret, tenantId, resourceUrl.

Make HTTP request like below. Replace all fields '{xxxxx}' details with your data. It will generate bearer token. Use this token to call your function app
POST /{tenant-id}/oauth2/token HTTP/1.1
Host: login.microsoftonline.com
Content-Type: application/x-www-form-urlencoded
Cache-Control: no-cache
grant_type=client_credentials&client_id={client-id}&client_secret={client-secret}&resource=https://{your-function-app-name}.azurewebsites.net

Comments

  1. super fast processingNovember 5, 2019 at 6:42 AM

    At Superfastprocessing, we run a multi-server configuration with high-fault tolerance and load balancers. Our platform is horizontally scalable and always stays highly available for real-time data processing needs.

    ReplyDelete

Post a Comment

Popular posts from this blog

AWS Kinesis - Stream, Firehose, Analytics Overview

AWS Kinesis: AWS Kinesis is managed alternative of Apache Kafka. It can be used for big data real-time stream processing. It can be used for applications logs, metrics, forecast data, IoT. It can be used for streaming processing framework like Spark, NiFi, etc.   Kinesis Capabilities: Kinesis Streams : Streaming data ingest at scale with low latency. It is a data stream. Kinesis Analytics : To perform analytics on real-time streaming data using SQL. You can filter or aggregate data in real time. Kinesis Firehose : To load streams of data into S3, Redshift, Splunk or Elastic Search. It is a delivery stream. Kinesis Data Streams : Streams are divided into shards. To scale up application we can update shard configuration by increasing number of shards. By default shard's data can be retained for 1 Day but you can extend it for 7 days. Multiple application can use same stream. Real-time processing of data with a scale of throughput. Record size shoul...
3 comments
Read more

CCA 175 Preparation with this 6 practice questions- Try to solve it in 1 hour

As I found very few practice questions available on the internet for CCA 175 - Hadoop & spark developer exam. I set 6 questions exam with the solution provided in the comment section.  If you complete it in less than 1 hour then and then think to apply CCA 175 exam else you need more practice. Question's prerequisites : import data from orders table with parquet file format and save data to hdfs path: /user/rj_example/parquet_data/orders import data from customers table and save data to hdfs path: /user/rj_example/data/customers import data from customers table with avro file format and save data to hdfs path: /user/rj_example/avro_data/customers import data from customers table and save data to hdfs path: /user/rj_example/data/categories import data from products table and save data to hdfs path: /user/rj_example/data/products with '\t' as fields seperator create local dir 'rj_example' copy data from /user/rj_example/data/products to local dir ...
3 comments
Read more

Get Free Voucher for Azure Certification

If you wanted to measure/prove your skill for Microsoft Azure cloud free of cost then this blog is for you. How to get Azure Free voucher code   Microsoft is giving opportunity to prove your skill for azure cloud free of cost. You just need to follow below steps and you will get your unique free voucher, then you can schedule certification exam free of cost. Please note that this is limited time offer and voucher will be valid for 3 months. Go to Microsoft Azure events website:  click here List of event will display, among them click on Microsoft Azure Virtual Training Day: Fundamentals Slot may be full for particular day, need to traverse all the date to find available slot. Once you find available slot, then register. You need to attend that virtual event for selected slot, then you will get voucher code in 7 days in your email. You can use this code to schedule exam free of cost. My Exam Experience: I have cleared  AZ-204: Developing Solutions ...
1 comment
Read more