Authentication in Cloud Services

Hi,
I could not find good documentation on authentication for Cloud Services. I have a cloud service which I want to give access to just my organization. How do I achieve this?
Thanks

Please follow this link:
http://www.asp.net/visual-studio/overview/2013/creating-web-projects-in-visual-studio#orgauthoptions
Organizational account authentication options
The Configure Authentication dialog gives you several options for Azure Active Directory (Azure AD, which includes Office 365) or Windows Server Active Directory (AD) account authentication:
Cloud - Single Organization (Azure AD, or AD using
directory integration with Azure AD)
Cloud - Multi Organization (Azure AD, or AD using
directory integration with Azure AD)
On-Premises (AD)
Frank

Similar Messages

Azure Authentication for Cloud Services

I updated Visual Studio to Web Tools 2013.1 and the "Enable Azure Authentication" disappeared. I need to secure this application, the Azure AD and domain are done, but I can't seem to find how to do it in Visual Studio anymore. I keep getting the
message:
The current installed Azure Authentication Tools is not compatible with the verion of Web Developer Tools you recently updated; therefore , the Azure Authentication related command and publish support will be unavailable.
'Click Here' to download the required update
SO IN TOTAL FRUSTRATION - One would think you could click and solve the problem BUT....NO
You get the message "This product requires Microsoft Web Developer Tools 2012.2.1 - Visual Studio 2012" Please install it, then try again installing this product again. Then the dialog closes, and there is no resolution.
HELP!

hi,
From the error message, I think you may need check your VS and Web Tools version whether matched each other.
Visual Studio to Web Tools 2013.1 need the version of Visual Studio 2012 and Visual Studio 2012 Express for Web.
If your VS met requirement, I suggest you could uninstall the Web Tools and installed it from this page (http://www.microsoft.com/en-in/download/details.aspx?id=41532 ). Any
update info, please let me know.
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Error while deploying adf application on oracle cloud service

hello, i hv registered oracle cloud service for java and database. i hv created simple adf application in which there are 2 jsf pages only linked together. I m using oracle jdeveloper 11gr2. so i hv created ear file for deployment on cloud. i deployed adf application on cloud using java console. But, after uploading application, deployment was failed. I tried 3 times this, but the result was same. I checked log, where i got 3 warnings in whitelist log and error in deploy log. Those are as follows:
Warnings in whitelist log:
2013-04-14 06:57:11 CDT: Starting action "API Whitelist"
2013-04-14 06:57:11 CDT: API Whitelist started
2013-04-14 06:57:12 CDT: WARNING - There are 3 warnings(s) found for Testapp.ear.
2013-04-14 06:57:12 CDT: WARNING - Path:Testapp.ear (3 Warnings)
2013-04-14 06:57:12 CDT: WARNING - Path:Testapp.ear (3 Warnings)
2013-04-14 06:57:12 CDT: WARNING - Path:Test_ViewController_webapp.war (3 Warnings)
2013-04-14 06:57:12 CDT: WARNING - Path:WEB-INF**** (1 Warning)
2013-04-14 06:57:12 CDT: WARNING - 1:Recommended child element "login-config" missing under element /
javaee:web-app.
If you want to make your application public, you can have empty
<login-config/> in your web.xml. If you need authentication then you must
have <login-config> and its child <auth-method> element in web.xml.
Without this element(<login-config>), users may be challenged by SSO, but
the application code will be executed as anonymous user only. Line No:4.
2013-04-14 06:57:12 CDT: WARNING - Path:WEB-INF**** (2 Warnings)
2013-04-14 06:57:12 CDT: WARNING - 1:Recommended child element "jsp-descriptor" missing under element /
orcl-weblogic:weblogic-web-app.
If you have a JSP file that is not pre-compiled, The compilation errors
could be shown on the browser. It is recommended to include
<jsp-descriptor><verbose>false<****><****-descriptor> in weblogic.xml.
Line No:2.
2013-04-14 06:57:12 CDT: WARNING - 2:Recommended child element "session-descriptor" missing under element /
orcl-weblogic:weblogic-web-app.
You will be required to have distinct cookie-path, if multiple
applications are accessed with in the same SSO session or if you have
multiple applications with different auth-method(CLIENT-CERT, FORM, BASIC)
in the same service instance.
Line No:2.
2013-04-14 06:57:12 CDT: WARNING - Testapp.ear had 3 warning(s).
2013-04-14 06:57:12 CDT: INFO - Whitelist validation has completed with 0 error(s) and 3 warning(s).
2013-04-14 06:57:12 CDT: Whitelist validation passed.
2013-04-14 06:57:12 CDT: "API Whitelist" complete: status SUCCESS
and Error in deploy log:
2013-04-14 06:57:12 CDT: Starting action "Deploy Application"
2013-04-14 06:57:12 CDT: Deploy Application started
2013-04-14 06:57:15 CDT: weblogic.application.ModuleException: Failed to load webapp: Test-ViewController-context-root because of DeploymentException: java.lang.ClassNotFoundException: oracle.adf.view.faces.bi.webapp.MapProxyServlet
2013-04-14 06:57:15 CDT: WL action state: failed
2013-04-14 06:57:15 CDT: Action FAILED with WL action state: failed
2013-04-14 06:57:15 CDT: Check the server log of your Java cloud service for more info about the failure.
2013-04-14 06:57:16 CDT: Application deployment failed.
2013-04-14 06:57:16 CDT: "Deploy Application" complete: status FAILED
I am using jdeveloper 11gr2, so pls dont tell me to use jdeveloper 11gr1. because, i hv already developed an application for my final year B.Tech and i cant migrate to previous release. So there is only one way for me by generating ear file and deploying from console.
So,
I m not getting what is the problem and what will be solution for this?
What should i do?
What changes should required?
pls, help me to get out from this problem !!!!!

Well, I guess you have a problem here. Check http://multikoop.blogspot.de/2012/12/deploying-adf-applications-into-oracle.html and from this
>
Note: In its current stage Oracle Java Cloud Service runs WebLogic Server 10.3.6 with the appropriate Runtime ADF 11.1.1.6. Deployment of ADF 11gR2 Applications is currently not supported. Beside this limitation some ADF Features are not supported on the Oracle Cloud. According to the Oracle Cloud Documentation it is not supported to use the following ADF features
ADF Desktop Integration
ADF mBean
ADF MDS (Seeded customizations or cross-session personalization)
ADF Mobile
ADF Active Data Services (=> No real-time ADF Web Apps in Oracles Cloud)
ADF Business Components services interfaces (web services) or events
ADF Data Controls for BI, Essbase, BAM, and JMX
Further there are some restrictions which are good to know I think
No Java Mail API (=>Sending Mails is prohibited)
No File system access by deployed applications (=>Writing files is prohibited)
No Direct use of Oracle JDBC Driver APIs
No Java Message Service (JMS)
Max Size for deployment archive 95MB
>
I hope for you that the information from the blog has changes in the meantime (blog is from end of last year). Check the current doc for the cloud ...
Timo

Network security with Oracle Database Cloud Service

Does the Oracle Database Cloud service support SSL? Or, any form of network encryption/authentication between a client and the service across the Internet?

Thank you Rick. I'm intending to use Oracle Database Cloud Service as a "Database-as-a-Service", however I have read that it is actually more of a "Platform-as-a-Service" offering.
What I would like to do is to interact with the Oracle Database Cloud Service via a local JDBC client. However, from further reading, it looks like the only way to interact with the Oracle Database Cloud Service from a non-Oracle-cloud-based client is via its RESTful web services (which, as you said, support SSL).
That is to say, I cannot simply connect to the Oracle Database Cloud Service from a local client just through JDBC alone. It looks like I would have to configure my client to make the relevant RESTful web service calls instead, and likewise configure my settings on the Oracle Database Cloud Service to make the necessary translations (from REST to SQL).
Just to finally clarify, is my above understanding correct?

Change basicHttpBinding to wsHttpBinding in azure cloud service web role

So I created a cloud service project in visual studio and added wcf service web role to cloud service.
By default wcf service web role binding is set to basicHttpBinding.
Currently my web.config looks like this:
<?xml version="1.0"?>
<configuration>
<system.diagnostics>
<trace>
<listeners>
<add type="Microsoft.WindowsAzure.Diagnostics.DiagnosticMonitorTraceListener, Microsoft.WindowsAzure.Diagnostics, Version=2.1.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
name="AzureDiagnostics">
<filter type="" />
</add>
</listeners>
</trace>
</system.diagnostics>
<system.web>
<compilation debug="true" targetFramework="4.0" />
</system.web>
<system.serviceModel>
<behaviors>
<serviceBehaviors>
<behavior>

<serviceMetadata httpGetEnabled="true"/>

<serviceDebug includeExceptionDetailInFaults="false"/>
</behavior>
</serviceBehaviors>
</behaviors>
<serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
</system.serviceModel>
<system.webServer>
<modules runAllManagedModulesForAllRequests="true"/>
<directoryBrowse enabled="true"/>
</system.webServer>
</configuration>
How do I change my config to use wsHttpBinding?

Hi,
Please refer to
http://msdn.microsoft.com/en-us/library/ms733099.aspx. From my experience, in Windows Azure, we cannot use Windows authentication (the default configuration for WSHttpBinding), unless we use WAAD and let the cloud server join the local domian. So it is
needed to turn off authentication, or use an alternative authentication mechanism (such as username and password).
Best Regards,
Ming Xu
<THE CONTENT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS OR IMPLIED>
Thanks
MSDN Community Support
Please remember to "Mark as Answer" the responses that resolved your issue. It is a common way to recognize those who have helped you, and makes it easier for other visitors to find the resolution later.

Managing connection strings Azure Cloud service deployment

I have an azure cloud service project which comprises of one worker role and one web role. I need to have both staging and live deployments but I need them to have different connection strings because the worker role generates lots of data which is reported
by the web application and I would not want to have test data in production.
What's the best way to configure this so that I can quickly swap or promote from staging to live and have the connection strings just update without having to republish from visual studio using a different configuration.

Hi,
Two ways to do it -
1. Keep your connection strings in cscfg so that you can change those on the fly after the deployment using azure management portal.
2. Keep connection string in the web configuration file at the time of deployment and have cscfg settings which can override those i.e. re-write those in the web configuration file when role instances are restarted.
I too experienced something similar to this but not for connection strings, it was for ACS i.e. authentication settings which I needed to have differently on both deployment slots, refer my blog post http://passionatetechie.blogspot.in/2014/02/moving-acs-settings-in-cloud.html you
can do similar for connection strings of your application.
Bhushan | < href='http://www.passionatetechie.blogspot.com'>Blog | <a href="http://in.linkedin.com/pub/bhushan-gawale/29/327/405"> LinkedIn</a> | <a href="http://twitter.com/BhushanGawale">Twitter</a>

Is there a way other than redeployment to migrate existing Cloud Services from one data center to another?

We have a need to correct affinity of Cloud Service, Azure DB, Storage and Mobile Services such that they are on a singl datacenter and do not get impacted by network latency when these components communicate with each other. Also to distribute various environments
across different data centers we need to realign some environments to mitigate all environments getting impacted if there is outage.
Existing Cloud Services and related Service Bus queues and topics need to be moved to a different datacenter. Is there a way to do this without having to redeploy cloud services (web and worker roles) or recreate the service bus entities (queues and topics)?
Also, the existing Cloud Service URL need to be retained without with user authentication won't be possible and hence when completed, the new cloud service should have the same URL.
Please provide best available options for achieving this or ask question if more information is needed.

Hi sumeetd,
As far as I know, currently there is no directly way to move services from one data center to another unless redeployment. You could submit a feature suggestion via this page (http://feedback.azure.com/forums/34192--general-feedback
). And at the same time,you could contact with azure support team via the channel below:
http://www.windowsazure.com/en-us/support/contact/
Any questions, please feel free to let me know.
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Lync 2013 Cloud Service Limitations

Can anyone point me to some references on the limitations with Lync 2013 in the
cloud? What are some pros and cons about cloud services with voice and video?

How much of this list is still true to the limitations of Lync Online?
The features not available are:
Searching for employees by their skillset in an on-premise SharePoint Server and SharePoint Online
Persistent group chat
Connect (federate) to IBM Sametime unified communications platform
IM/presence federation with XMPP networks such as Jabber and Google Talk
IM/presence with AOL and Yahoo
Authenticated experience in Lync Web App
Outlook delegation for scheduling online meetings
Generate a link to schedule a meeting via web page
Schedule an online meeting in Outlook Web App
Dial-in audio conferencing on Lync Server
Multimedia content upload
Screen shot capture (including annotation)
Interoperability with on-premise video conferencing systems
Make incoming/outgoing calls over the phone network (PSTN dialling)
Call hold/retrieve
Dial-out over the phone network (PSTN) for meetings
Advanced call controls including transfer, forward and simultaneous ring
Access to Exchange Online voice mail
Team calling
Delegation for voice, for example, boss delegates to secretary
Call park
Outgoing Direct Inward Dialing (DID) manipulation
Enhanced 9-1-1 for location by emergency services
Dial plans and policies
IP desk phone support
Survivable Branch Appliances for branch office resiliency
Call admissions control
Support for analog devices such as a fax
Response groups
Private line (secondary DID for executives)
Interoperation with third-party private branch exchange (PBX)
Presence interoperation with third-party PBX
Remote call control (RCC) (also known as “click-to-call”) with on-premises PBX
Malicious call trace
Unassigned number
Network Quality of Service (QoS) and Differentiated Services Code Point (DSCP)
Media path optimisation
Phone number management
Call detail recording (CDR) and billing reporting
Integration with call centre solutions (Aspect)
Connect to IP phones (Lync 2010 Phone Edition)
Advanced interface for receptionists (Lync 2010 Attendant client)
Legacy clients (eg. Office Communication for Mac, 2007 R2, Mobile for Windows Mobile 6.x)
Anti-malware scanning for meeting content and file transfers
Instant message archiving (server-side only)
Exchange Unified Messaging (UM) interoperation with Exchange Online
Exchange UM interoperation with Exchange on-premise
Use the same domain for Lync on-premise and Lync Online users
Splitting workloads (for example, running IM/presence/voice on-premises, and conferencing in the cloud)
Attendee/user reporting
Reporting (using call recording and Quality of Experience)
Server side APIs to connect to other programs

How to add security for Azure Cloud Service?

Hi,
We have build some API's in azure cloud service.
We want to add security for Azure Cloud Service.
How to add security for Azure Cloud Service?

Hi Santhosh,
You may add security for your API's by using:
Mutual certificate authentication
Using OAuth 2.0
Manage developer accounts
Regards,
Manu Rekhar

SSL and custom domain configuration for cloud service

Hi,
I am doing custom domain mapping and SSL configuration for a cloud service web role. Another important aspect is Cloud service web role uses ADFS in between for authentication.
I have custom domain mapped, SSL uploaded on cloud services Certificates
tab in management portal, certificate .pfx and chaining certs .CER are added as below -
<Certificate name="UATCert" thumbprint="A" thumbprintAlgorithm="sha1" />
<Certificate name="Certificate1" thumbprint="B" thumbprintAlgorithm="sha1" />
<Certificate name="Certificate2" thumbprint="C" thumbprintAlgorithm="sha1" />
I see these certificates getting added properly to Azure cloud service web role instance VM.
The problem is, when I access the custom domain,
https://mysite.com/default.aspx in the browser ultimately after ADFS login I see
https://cloudservice.cloudapp.net/default.aspx. My understanding is, cloudapp.net should not be seen in the browser to the client. Also I keep getting error of certificates stating "There is
a problem with this website’s security certificate" when browser shows cloudapp.net url.
How can I avoid display of cloudapp.net in browser and show only custom domain Url. Also how can I avoid this certificate error ?
Thoughts?
http://sanganakauthority.blogspot.com/

Hi kunal,
Based what you described, I understand that you want to use the custom domain for cloud service web role and apply azure active directory authentication to the web role application.
>>>The problem is, when I access the custom domain,
https://mysite.com/default.aspx in the browser ultimately after ADFS login I see
https://cloudservice.cloudapp.net/default.aspx.
As for above issue, I think you should make sure you have registered the web application in azure AD both "SIGN-ON URL" and "Reply URL" are
https://mysite.com/default.aspx
>>>Also I keep getting error of certificates stating "There is a problem with this website’s security certificate" when browser shows cloudapp.net url.
Try to upload a valid certificate (provided by CA) to cloud service for your custom domain.
Best Regards,
Fuxiang
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place. <br/> Click <a
href="http://support.microsoft.com/common/survey.aspx?showpage=1&scid=sw%3Ben%3B3559&theme=tech"> HERE</a> to participate the survey.

Adobe Cloud Services

How comes Adobe Cloud services is not available to people in Africa?

There is a special sub forum for iOs Reader:
http://forums.adobe.com/community/adobe_reader_forums/ios?view=discussions

Unable to connect to VM's in new cloud service via express route

We have changed our express route setup, initially we had an express route via London, but we have added a second one via Amsterdam and removed the one via London. All existing and new vm's in the different vnet's have connection to our local datacenter,
but as soon as we create vm's in a new cloud service the published routes don't seem to be picked up and the machine are only reachable in their local vnet on azure.
Does anyone have an idea where to look, it looks like the route publishing does not seem to work correctly, but it is strange that new vm's in existing cloud service do work correctly. BGP peering and vnet have been provided access via the expressroute and
all have status provisioned.

Hi Syed,
When I try to connect to a new vm via rdp or try to do a tracert to the machine (with firewall turned off on the vm) I don't get a response (traffic is routed via the express-route correctly). If I do a tracert to an ip on the on premise network
from the vm in question the trace is directed to internet instead of to the on premise network via the express route.
the new cloud services were created in the same region as the working cloud services and the vm's are also in the same vnet/subnet as the working vm's. If I delete a vm (keeping the disks) from a new cloud service and redeployed it in an existing cloud service
I can reach it again via the internal ip.
We have checked the route publishing and the correct routes are published to the express route/vnet.
When I check the provisioning of the vnet's via get-azurededicatedcircuitlink all the vnet's in question are listed as provisioned.
I'll try to remove the bpgrouting for the original expressroute this evening to see if that helps.
kind regards
Xander

Creative Cloud Service "Not avilable in your country"

Dear Administrator,
We have urgent business needs for using Adobe Creative Cloud services. Our company resides in Türkiye(TURKEY +90 Area Code).
We would like to join the mebership system for minimum 50 users/per year business plan on Creative Cloud but referral warns "Adobe does not have services to/in your country.
So, my first question is;
Will it be a live datacenter servicing business clients in TURKEY soon ?
Or in a way of solution - Shall i try to participate services in the name of an international company which we are part of.(Because we even cannot manage to enter payment site ( restiricted zone from tr-TR) But we can from England.)
Secondly;
If we subscribe services using method mentioned above , will it be a problem after payment and participate in services where our business groups head office in England and using services from TURKEY (Telecoms Network) and deploying applications (CS6 or Adobe pro XI etc) on internal network .
Is there a possibility that happens to occur restrictions on use of applications or activation problems maybe ?
Urgent help and assistance needed!

Adobe Resellers http://adobedealreg.force.com/PartnerSearch?lang=en
-http://www.adobe.com/content/dam/Adobe/en/products/creativecloud/cc/pdfs/cc-availability-m atrix.pdf

We have concerns with Adobe Acrobat DC - document cloud services and how it relates to HIPAA. Has anyone else worked through these issues?

We have questions relating to the Document Cloud services offered with Acrobat DC. We are considering disabling the cloud feature to stay in compliance with HIPAA. Has anyone else worked through these issues?

Hi mikem82897618,
You can refer the following link to know what can be done with Adobe Document Cloud Services when working in Acrobat DC:
Store Files Online, Share & Access From Anywhere | Adobe Acrobat.com
Also, visit this link to know more on how Adobe Document Cloud services are compliant with HIPAA security standards:
E-signatures vs digital signatures | eSign services from Adobe
Please specify more details on the same as why you would need to disable the Cloud feature.
What and where exactly are you facing the trouble?
Let me know.
Regards,
Anubha

How do I tell my clients to configure the connectionstrings for a cloud service?

I have an application that exists in two forms
A Windows Service
A Clouse Service with a Web Worker Role
Both applications have an encrypted connection string in the app.config;
for clients using the Windows Service I know how to tell them to change the config file.
For a cloud service is it possible to edit the configuration file?
I read something about Azure Settings, but I can't find any good information about that, is that the preferred method for setting environment settings in a Cloud Service?
Can you remote in to a VM or whatever hosts the Cloud Service?
Thank you for any help. I am writing the documentation about how to setup the Azure environment and I realized I don't know myself, I only know how to publish with Visual Studio to a cloud service with the values already set. That works, but I can't
tell a client to use Visual Studio.

Hi,
For a cloud service, though it is possible to access instance VMs and do changes on their file system by RDP sessions, but it is not recommended, as you will end up loosing your changes if role instance VMs are restarted.
If you really want to keep certain settings configurable and which will be shared by all your role instances, best way to do is to utilise the cloud service configurations, typically you mention these settings in .cscfg file and you can also edit those using
azure management portal.
You can also access those from your code
string settingValue = CloudConfigurationManager.GetSetting("SettingString");
Read more about it here - http://msdn.microsoft.com/en-us/library/azure/ee405486.aspx
http://haishibai.blogspot.in/2012/09/windows-azure-cloud-service.html
Bhushan | Blog |
LinkedIn | Twitter

Authentication in Cloud Services

Similar Messages

Maybe you are looking for