Azure AD Authentication

[Tango]

Hi,

I would like to create an authentication system for my (Edit: Canvas) Power App that users would have to sign up for, and sign in every time the use the app.

This app is not for a private corporate network and will be for public use.

I would like use Azure Active Directory.

A Google and you tube search hasn’t quite found what I’m looking for so my question is are you aware of any demos, videos etc for this type of use case?

Thank you

Todd

[poweractivate]

@Tango 

Creating an authentication system for your Power App using Azure Active Directory (Azure AD) might involve something like this:

1. Create an Azure Account and Azure Active Directory (Azure AD) Tenant:

If you don't already have an Azure account, create one. Azure offers a free tier that can be used for testing and learning.
Once your Azure account is set up, create a new Azure AD tenant. This will be used to manage your users and their access to the application.

Register Your App with Azure AD:

2. In the Azure portal, register your Power App with Azure AD. This will allow Azure AD to recognize your app and manage its authentication requests.
During this process, you'll receive an Application (client) ID and a Directory (tenant) ID. Save these for later; you'll need them to configure your app.

Configure your Power App to use Azure AD for Authentication:

3. Within your Power App, set up Azure AD as the authentication provider.

This will require the Application ID and Tenant ID you received when registering the app with Azure AD.
Configure the app to require authentication on every use. This setting might vary depending on the type of Power App you're using (canvas app, model-driven app, etc.).

See the bottom of this post for more details on this step.

4. Create User Accounts:

Now that your app is set up to use Azure AD for authentication, you need to create user accounts in your Azure AD tenant.
Users can then sign up with these accounts when they first use the app.

Manage User Access:

Azure AD allows you to manage user access to your app. For example, you can assign users to roles, or control access based on group membership.

Test Your Setup:

Test the authentication process by signing in with a user account you created. Ensure that the sign-in process works correctly and that the user has the appropriate level of access to the app.

Now for Step 3, this may involve its own steps:

First, it's important to understand what a custom connector is. In Power Apps, a custom connector is essentially a wrapper around a RESTful API that allows the Power App to communicate with the service. In this case, you might use a custom connector to interact with Azure AD's authentication services.

Here is how you might create a custom connector for Azure AD authentication in your Power App:

1. Create a Custom Connector:

- In Power Apps, navigate to the "Data" section and then "Custom Connectors".
- Click on "+ New custom connector" and choose "Create from blank".
- Provide a name for the connector and continue.

2. Define the Connector's General Details:

- In the "General" section, provide the necessary information such as Description, Host (which will be the base URL of the RESTful service), and Base URL (the base URL path of the service).

3. Define Security Details:

- In the "Security" section, choose "OAuth 2.0" as the authentication type.
- Then, provide the necessary details for Azure AD authentication, which includes the Client ID, Client Secret, Authorization URL, Token URL, and Refresh URL. For Azure AD, these are often:
- Authorization URL: `https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize`
- Token URL: `https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token`
- Here, `{tenant}` is the Azure AD tenant ID.

4. Define Connector's Actions:

- In the "Definition" section, define the actions. Actions represent callable endpoints in your RESTful service.
- Add a new action, and specify the operation ID (which is a unique identifier), request method (GET, POST, etc.), and operation URL.
- Under "Request", add any necessary parameters.
- Under "Response", click on "Import from sample" and provide a sample response from the service.

5. Test the Custom Connector:

- Finally, go to the "Test" section. Here, you can create a connection and test the actions you have defined in the previous step. It's important to test the connector to ensure it's working as expected.

Once the custom connector is created, you can use it in your Power App to perform the necessary authentication tasks.

Please note that the above steps are a general guideline, and the specific details may be likely to vary depending on your particular use case and the specifics of your Azure AD configuration and app as well.

See if it helps @Tango 

[Tango]

Wow thanks for such a comprehensive response, @poweractivate 

[Tango]

So what you are saying @poweractivate, is that its not so simple when using a Canvas app. (your Step 3)

[poweractivate]

@Tango 

You can just see if simply doing something like this instead is enough for you, but I am not sure that fulfills the requirements you gave.