SaaS product with on-prem AD integration

user_14136268 0
Viewed 223

I have a SaaS product, it has it's own cloud-based authentication, and it is hosted in Azure. This works for most of my customers, but supposing a customer has their own on-prem AD - is it possible my SaaS product (cloud-hosted, external to the customer's network) can swap out my own authentication for the AD? What technologies/APIs are available to me for this?

Further Context

This is a vue app (client-side) with a .Net back-end (.Net core API in Azure).

I'm currently using okta, I pass okta data from a login form, and it returns a token.

If I could do a straight swap with okta for AD instead and call off to the client's AD server and receive a token (on successful authentication) and then pass that token as part of every request as I do with okta, that would be ideal.

What I've Tried

I know Okta itself has options for single-sign-on with AD, but I don't see the need for Okta if it's only going to be used as a way of interfacing to my customer's AD server, I'd like to just go 'straight there' instead.

okta azure active-directory authentication
1 Answers

Okta is not required to do Azure AD authentication. I have successfully completed azure ad single sign-on authentication using MSAL in Angular and Python.

Go to your portal.azure.com -> Azure Active Directory -> APP Registration -> Select you app -> Quick Start -> Select programming language -> Click download the source code.

To understand the code, use this link https://docs.microsoft.com/en-us/azure/active-directory/develop/tutorial-v2-angular

As you mentioned. you have used on-premise code, use the same code for authentication, this below tutorial explains how to do authentication

https://docs.microsoft.com/en-us/azure/active-directory/develop/tutorial-v2-javascript-spa

user_18625900
Related