How to make API manager developer console client use AAD as a oauth2 token issuer

the answer is configure the oauth2 authorization service record to ONLY use the client_credentials grant type.
See
https://yorkporc.wordpress.com/2015/02/23/getting-api-manager-to-use-aad-sts-finally/ for a success case.
Do NOT (as one might do, thinking as a security engineer) use the authorization_code grant.
So, after a week of effort, I figured my way through awful documentation to do something really easy (once one knows how).
The documentation at
http://azure.microsoft.com/en-us/documentation/articles/api-management-howto-oauth2/#step1 sends one the wrong way, since its picture happens to select authorization_code (which doesn't work, at least with AAD as the AS).
its pretty clear that the developer console site is not architected to be using AADs own rather excellent delegated user identity security model. One could be leveraging the web site's own session (itself derived from the id_token issued by AAD) to entitle
the web app server-side process to act for the user, which would normally supply (user's) auth_code and the sites own client credential set  to get privileged access to certain api endpoints of the api management instance. Obviously, that would require
the console to be nominating which resouces (Api endpoint, within a product) are to be placed in the audience field of the token, which in turn requires more advanced AAD configuration (of those API endpoints, as AAD apps in their own right).
Sigh. MSDN editorial culture strikes yet again.

hi Peter,
Thanks for your feedback!
I will try to reproduce this issue on my side and report it. Thanks for your time and appreciate your patience.
Any results, I will post back ASAP.
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Similar Messages

  • How to determine installed management studio is client or server

    How to determine installed management studio is client or server
    when I see in help it says 
    version 10.50.1600.1
    Neil

    Blog/thread:
    7 things to check to resolve  “A network-related or instance-specific error occurred while establishing a connection to SQL Server…” 
    http://social.msdn.microsoft.com/Forums/sqlserver/en-US/0628296e-939a-4700-b498-1c3c9ce90597/a-networkrelated-or-instancespecific-error-occurred-while-establishing-a-connection-to-sql-server?forum=sqlsecurity
    http://blogs.msdn.com/b/sql_protocols/archive/2007/05/13/sql-network-interfaces-error-26-error-locating-server-instance-specified.aspx
    http://stackoverflow.com/questions/18060667/connect-to-server-a-network-related-or-instance-specific-error
    Kalman Toth Database & OLAP Architect
    SQL Server 2014 Database Design
    New Book / Kindle: Beginner Database Design & SQL Programming Using Microsoft SQL Server 2014

  • How to make Solution Manager 7.0??

    Hi Experts,
    I am totally new to Solution Manager.I have installed it & when it I am checking
    System->status->component version--->Solution Manager 4.0
    ST Stack is - 15.
    How to make Solution Manager 7.0?Which Support pack level I need to apply to make it Solution Manager 7.0?
    For EWA,MOPZ Configuration what should be the minimum stack level of ST??

    Hello N.Das
    Solman 7.0 IS Solman 4.0 . I mean only the name has been changed so it goes with version of Netweaver; nothing more than that. So you have Solman 7.0. right now !
    concerning the minimum SP Level for functionalities EWA and MOPZ. There is no correct answer. In your current Level you already have both; but ( and that is especially the case for MOPZ) new features have been added since ST15.
    Current latest Solman version is EHP1 ST23.
    Depending on what functionalities you re interested in MOPZ you will be able to choose the minimum level required.
    If i were you I would go for the last one, especially because it contains new bug fixes and valuable enhancement for MOPZ
    On this link you can check what is in what version of Solman: https://websmp206.sap-ag.de/~form/sapnet?_SHORTKEY=00200797470000089906&
    Regards,
    Khalil

  • How to make a program for backgroung processing used servlet

    how to make a program for backgroung processing used servlet

    well i need the coding part written in servlet ,in which servlet is always ready for accepting a client request.

  • Azure API Management developer portal runtime error

    Hi,
    I'm trying to use the Microsoft Azure API Management functionality just announced in the TechEd 2014 americas.
    I was able to create my namespace for Azure API Management in the Azure Mgmt Portal.
    But now, when I click on the Management Console or Developer Portal, I got a runtime error (ASP.Net Runtime Error).
    I tried from a PC where I'm not authenticated in Azure and it works until I reach the login page, and then I got this Runtime Error again and again.
    My subscription is a MSDN subscription.
    Any ideas or workarounds here?

    Hi,
    The problem still exists but it appears only when I'm authenticated.
    For example, I open the Windows Azure Management Portal with my admin account, goes to the API Management and click on the Management Console. I'm redirected to the https://middleway.portal.azure-api.net/admin URL and here I got a Runtime Error ASP.Net...
    Strange no?

  • How to develop VoIP client using SIP in J2ME?

    Hi Everybody,
    I want to develop a VoIP client in J2ME that connects to asterisk server of debian and can call to the registered user of asterisk server and can have a telephonic talk session easily.
    Do anybody have idea regarding the development of the client or having tutorial that teaches the development of VoIP in J2ME or in any other way.?
    PLZ help me to provide the solution.
    Thanks in anticipation.
    with regards,
    KHAKHAR SAGAR

    Hi
    I am interested about developing VoIP application (using SIP) in J2ME platform. But I am stuck with the problem of MMAPI. Without using MMAPI J2ME has no access to mobile media devices, such as speaker or microphone, and without creating a player MMAPI can't play media data, such as sound or video. But its not possible to record voice and play voice data simultaneously using player in J2ME. So it seems almost impossible to implement VoIP application maintaining all its constraints and requirements, specially in case of delay and jitter.
    I am looking for some solution, which will provide the ability to overcome this problem. I come out with two possible solutions, but not sure about their out come. If we can develop a native media application, we can have access to it by using KNI (K Native Interface). In that way we can take some risk to develop VoIP application for J2ME. My another solution is, we can handle the player using MMAPI to record and play voice data in mill second level, so that we can have a real time feeling, though I am not sure if its possible by using RTSP.
    If any one have solution of this problem, please help us.
    Reagards
    Asif Mohammed Adnan

  • How to make an apllication in LV7 which using a DLL ?

    My vi application call a DLL, it runs ok offline, I want to make it running
    on a CVS, so how can I include the DLL when making the appliaction.
    thanks.

    My interest is in building a stand-alone application or an exe file. The DLL
    was generated using Visual C++. It works alright off-line. I just want to
    build an exe with the DLL included so I can run it on the CVS or any other
    platform. Do I need to copy the DLL to the CVS? What if the platform does
    not have sufficient storage media?
    "jdigiova" wrote in message
    news:[email protected]..
    > What DLL are you calling? Is this DLL something that you wrote? What
    > programming environment did you make the DLL? Are you getting an
    > error when you download a VI with this DLL? What is happening?
    >
    > In general, a DLL will work in RT if that DLL does not make any
    > unsupported Windows API calls. If you have
    CVI you can develop a DLL
    > using the build option to make it compatible for RT. This will inform
    > you if you are making any unsupported calls.
    >
    > Joe D.
    > National Instruments

  • How to make an order on repeating frame using Formula Column?

    Hi All,
    I have a repeating frame dependent on some query, how to make an order on this repeating frame using a formula column defined in its group and dependet on values from the query?
    Note: I'm using Reports 6i

    Place your formula column at the top of the itm group and set the BREAK_ORDER to assc.. or desc...
    Hope this helps
    Hamid
    if problem solved, close the thread.

  • How to make a Struts message null after used in JSP?

    Hi,
    In the context of Struts/JSP,
    An action class might write error messages by
    ActionError msg = new ActionError("msg.request.something");
    ActionErrors msgs = new ActionErrors();
    msgs.add(ActionErrors.GLOBAL_ERROR,msg);
    saveErrors(request,msgs);
    This message will produce a popup modal window by the following JSP code:
    <logic:messagesPresent>
    <html:messages id="error">
    <!--<li class="infomsg"><bean:write name="error"/></li> -->
    <script>javascript:alert('<%=error%>')</script>
    </html:messages>
    </logic:messagesPresent>
    The problem is that this JSP page is shared by serveral actions: when another action invoke this page again, the previous error message will take effect again.
    So my question is how to make message null after used once by its author.
    Thx.
    PY

    msgs = null;

  • How to make the yellow status to green using Process chain in bw 3.5?

    Hi all,
    How to make a request in the infocube from yellow to green using an process chain in bw 3.5?
    Thanks
    pooja

    Hi.
    Use these two Functional Modules one after the other:
    First - RSAPO_SWITCH_TRANS_TO_BATCH
    Second - RSAPO_SWITCH_BATCH_TO_TRANS
    Regards.

  • How to make it repleatedly printed out by using timer??

    Dear Friends:
    I have following code to run, When I press R to repeat println, only 1 line print out,
    But I hope to make it continueously print out.
    How to make it repleatedly printed out until I press CTRL + C key ??
    Thyanks
    import java.util.*;
    import java.awt.event.ActionEvent;
    import java.awt.event.ActionListener;
    import java.io.*;
    public class CertainAndRepeatTime{
      public static void main(String[] args) throws IOException{
        int delay = 1;
        Timer timer = new Timer();
        ActionListener actionListener = new ActionListener() {
            public void actionPerformed(ActionEvent actionEvent) {
              System.out.println("Hello World Timer");
        System.out.println("What do you want (Certain time or Repeat time)?");
        System.out.print("Please enter \'C\' or \'R\' for that: ");
        BufferedReader in = new BufferedReader(new InputStreamReader(System.in));
        String ans = in.readLine();
        System.out.print("Please enter  ans=" + ans  + " IsTrue=  " + (ans.equals("R") || ans.equals("r")) +"\n");
        if (ans.equals("C") || ans.equals("c")){
          //System.out.println("This line is printed only once start...");
          timer.schedule(new TimerTask(){
            public void run(){
              System.out.println("This line is printed only once.");
          },delay,1);
        else if(ans.equals("r") || ans.equals("R")){
          timer.schedule(new TimerTask(){
            public void run(){
              System.out.println("This line is printed repeatedly.");
          },delay, 1000);
        else{
          System.out.println("Invalid Entry.");
          System.exit(0);
        System.exit(0);
    }

    The Timer is working fine, but because it runs in another Thread, your program is ending before the Timer can repeat.
    The simplest way to make your program wait until it is force-quitted as you describe would be to make an infinite loop (although this isn't very good practice), like this:
        else if(ans.equals("r") || ans.equals("R")){
          timer.schedule(new TimerTask(){
            public void run(){
              System.out.println("This line is printed repeatedly.");
          },delay, 1000);
        while(true){} //This will make your main thread hang.
        }A better way, though, would be to listen again with your System.in reader until they enter a letter that means quit.

  • How to make smooth line by brush tool using shift key?

    Heya, I have a short question. Is there a way to make smooth line by brush tool using shift key, without that characteristic dot on the begining? I'm using PS CS6 on Win7.
    http://i.imgur.com/orGsIwv.jpg
    Cheers

    The shift key constrains the brush to paint a straight line. Those dark spots you see are from two paint strokes overlapping each other. If the flow or opacity of the brush is not at 100% you can see the stroke below it.

  • How to make Forms less dependent of client PC ? (Best Practice?)

    Hello,
    We are on Forms 10g (and I also noticed the same pb with previous versions)
    We built quite big applications that use Webutil and jInitiator (not Java plugin)
    The application is used via Web only.
    At the deploiement of the applications, we experienced many difficulties due to specific configuration of Internet Explorer (or another browser, Firefox) of each one person of the company
    I suppose this situation has also been experienced by others...
    Do you have any suggestion of best practices for making such application less dependent of the client PC configuration ?
    Thanks in advance,
    Olivier

    Try to use http, i don't thing direct open the socket can pass throught the socket if your proxy haven't forward those ports~
    Hi All,
    I have problems with my applet working through
    gh proxy.I am using a client applet which makes a
    socket connection to a Java application running on the
    same pc as the web server.
    Everything works fine when I am directly
    ly connected.However it does't work when connected
    through a proxy? I am using object o/p & i/p streams
    for the exchange of data b/w client applet & the
    server java application.How do I overcome this
    problem.
    Currently I am using WinGate 3.0.2 as my proxy(I
    (I did't see any firewaal setting there) but I intend
    to make applet work through any proxy for that
    matter.Using a higher level protocol such as UDP would
    help in this regard?i think UDP/TCP is not the matter for that!
    This is urgent.PLease reply ASAP...
    best rgds,
    prithvi

  • How to make openitem managed GL accounts to Non open item and the implicati

    Dear all,
    Can any one please tell what are the steps to be taken for making an openitem managed GL accounts to Non open item and the implication of this change.
    Thanks in advance.
    Gokul

    Hi Gopal,
    You can maitian a gl a/c without line item display to do so follow the path
    sap easy access-accouting-financial accouting-general ledger-master records-gl a/cs-individual processing-centrally, or trans code FS00
    then open the gl account in the required company code and click control data ,then  click change and under account management in company code u can un check line item display and save the changes.
    Make sure line item display is off for recon accounts as the line item are maintained at customer or vendor level and for bank a/c line item should always be ticked on .
    Hope this is helpful if so  reward points.
    regards,
    Mayur

  • How to make bank management system using java file system

    Hi, I have some fields
    1.ID
    2. Deposite
    3. Withdraw
    4. Balance
    Now how can i manage this Bank Management System using java file system.
    Thanks in advance.

    Then we're back to (1): Do your own homework. Google has zillions of links on handling files in Java. When you have written some code and have an actual problem, we'll be happy to help you with it.
    (edit) Incidentally, this sounds suspiciously like the sort of problem they set for the certification programs. In which case, don't bother; they're not worth the virtual paper they're printed on.

Maybe you are looking for