BizDoc.Authentication.Azure 8.44.4

Azure for BizDoc

Add Azure authentication and storage for BizDoc.

dotnet add package BizDoc.Authentication.Azure

program.cs

using System.Security.Claims;

builder.Services.AddBizDoc(options => {
    options.IdentityClaimType = ClaimTypes.Name;
}).
	AddAzure(options => {
        options.ApplicationId = "{application-id-here}";
        options.TenantId = "{tenant-id-here}";
        options.ClientId = "{client-id-here}";
        options.ClientSecret = "{client-secret-here}";

        options.SystemGroupName = "{system-id-here}";
    });
s
app.UseAzure();

You can use the appsettings.json file.

{
  "Azure": {
    "ApplicationId": "{application-id-here}",
    "TenantId": "{tenant-id-here}",
    "ClientId": "{client-id-here}",
    "ClientSecret": "{client-secret-here}",
    "SystemGroupName": "{system-id-here}"
  }
}

And provide the section name to AddAzure().

builder.Services.AddBizDoc(options => {
    ...
}).
	AddAzure(builder.Configuration.GetSection("Azure"), configure => {
        ...
    });

The ApplicationId should be set to the application Object ID and the ClientId to the Application (client) ID.

IdentityClaimType needs to be set to one of:

AzureClaimTypes (EmployeeId, etc.) are supported only on SAML. Add Attributes & Claims matching the claim name.

The SystemGroupName maps to BizDoc admin group.

Use Password-Based Single sign-on

	AddAzure(options => {
        ...
    }, configure => 
    configure
        .UsePasswordBasedSignOn()
        .UseIdentityProvider());

Uee SAML

Set Reply URL to /signin-oidc, and Logout Url to /signout-callback-oidc.

	AddAzure(options => {
        ...
        options.ClientCertificates = [ new CertificateDescription {
                          SourceType= CertificateSource.StoreWithThumbprint,
                          CertificateStorePath= "CurrentUser/My",
                         CertificateThumbprint = "{certificate-thumbprint-here}"
                    } ];
    }, configure => 
    configure
        .UseSAML()
        .UseIdentityProvider());

Set mode to SAML in app.module.ts.

You can use the appsettings.json file.

{
  "Azure": {
    "ClientCertificates": [
      {
        "SourceType": "StoreWithThumbprint",
        "CertificateStorePath": "CurrentUser/My",
        "CertificateThumbprint": "{certificate-thumbprint-here}"
      }
    ],
    ...
  }
}

Download certificate and set CertificateThumbprint.

Use blob storage

Set a storage for attachments.

AddBizDoc().
    AddAzure(
        options => ..., 
        configure => configure
            .UseBlobFileStore(o => o.ConnectionString = "{connection-string-here}"));

Use mail

Set EmailAddress.

builder.Services.AddBizDoc().
    AddAzure(
        options => ..., 
        configure => configure
            .UseEmailer() /* replaces SMTP */
            .UseMailFeedback(o => o.EmailAddress = "{bizdoc-address-here}"));

app.UseBizDoc().UseMailFeedback();

Configure

Check ID tokens and switch Allow public client flows to yes.

API Permissions

• User.Read.All
• UserTeamwork.Read.All
• Group.Read.All
• GroupMember.Read.All
• Organization.Read.All
• Place.Read.All
• Contacts.Read
• OrgContact.Read.All
• Sites.Read.All
• Team.ReadBasic.All
• TeamMember.Read.All

In addition, Mail.ReadWrite and Mail.Send is required when UseEmailer() or UseMailFeedback().

Workflow

Manager, document owner manager in Azure.

Directory Role.

Widgets

My Group Peers.

My Team Peers.

Direct Reporters Pending.

Teams Performance.

Groups Performance.

Departments Performance.

Administrative Units Performance.

Source

Attributes

Rules

Resolvers

Angular

Install the module.

npm i @bizdoc/azure

Import the module in app.module.

imports: [AzureModule.forRoot({
    clientId: '{client-id-here}',
    mode: 'SAML|Password-Based',
})]