REST API OAuth Support

[tiwood]

We want to use access_tokens obtained from Azure AD with our Universal Dashboard REST API.

Currently the configuration yields the following error message:

$AuthenticationMethod = New-UDAuthenticationMethod -ClientId '123' -Instance "https://login.microsoftonline.com" -Domain "mytenant.onmicrosoft.com" -TenantId '123'


Start-UDRestApi : REST APIs do not support OAuth.

Describe the solution you'd like

I want to use a access_token obtained from Azure AD (specifically for my REST API) to authenticate against my API.

Example JWT from Azure AD (relevant bits):

{
  "aud": "https://my-dashboard-api.foo.bar",
  "iss": "https://sts.windows.net/123/",
  "appid": "123",
  "roles": [
    "Global.ReadWriteAll"
  ],
  "scp": "user_impersonation",
  "tid": "123",
  "unique_name": "johndoe",
  "upn": "[email protected]",
  "ver": "1.0"
}

Additionally it should be possible to use claims based authentication with REST API Endpoints. See here

[djabou78]

Some news about this issue ?