Skip to content

Latest commit

 

History

History
36 lines (24 loc) · 2.46 KB

Using-AAD.md

File metadata and controls

36 lines (24 loc) · 2.46 KB
Raw

Using Azure Active Directory authentication

You can configure the NuGetGallery to use Azure Active Directory to manage your accounts.

Create an Azure Active Directory application registration

  1. On the portal, open the "App registrations" blade.
  2. Select "New registration".
  3. For "Supported account types", select "Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)".

⚠ NOTE: This allows any Azure Active Directory or personal account to create an account and publish packages to your on-prem gallery. If you'd like to authenticate with a specific directory (the "Single tenant" option), you will need to make a code change later.

  1. For "Redirect URI", select "Web" with the value https://<Your domain>/users/account/authenticate/return.
  2. Press "Register" to create the application.

You will need to configure the Azure Active Directory application before it can be used by the NuGetGallery:

  1. On the "Overview" pane, note down the "Application (client) ID".
  2. Navigate to the "Authentication" pane. Under the "Implicit grant" section, enable "ID tokens" and press "Save".
  3. Navigate to "Certificates & secrets" pane and create a new client secret. Note the value of your client secret.

Configure the Gallery

Now that the Azure Active Directory application is ready, let's configure the NuGetGallery to use your new app:

  1. Open the NuGetGallery solution using Visual Studio.
  2. Modify the "Web.config" file in the NuGetGallery project.
  3. Modify the Auth.AzureActiveDirectoryV2.Enabled setting to true.
  4. Modify the Auth.AzureActiveDirectoryV2.ClientId setting to the application ID you copied earlier.
  5. Modify the Auth.AzureActiveDirectoryV2.ClientSecret setting to the client secret you copied earlier.

If you selected the "Single tenant" option when you created your Azure Active Directory app registration, update AzureActiveDirectoryV2AuthenticatorConfiguration to set the authority tenant ID to your AAD Tenant ID:

openIdOptions.Authority = String.Format(CultureInfo.InvariantCulture, AzureActiveDirectoryV2Authenticator.Authority, "<Your AAD Tenant ID>");