Forum Widgets
Latest Discussions
Unable to get Python3.12 running on Azure App services
Good day, I am having endless trouble getting a python app to run on azure service apps. I cannot find anywhere to install modules like pip, which I need to install openai. Can someone please assist as I've been struggling for 2 days now... I am fairly new to this process. Deployment goes through, but it fails to install pip modules Thank you in advance! W
Unable to integrate Amazon Managed Grafana on Azure
Hello everyone, I am struggling here with Amazon Managed Grafana on Azure (the one available on Gallery). Have checked MS and AWS documentation and isn't clear regarding assertion mappings. Currently we are able to reach this error, when logging in with a user that do part of a group that was included on that AMG app in Azure (have test with another user account not there and gets blocked): From Entra ID sign in logs, is all good. So I think that could be related with AWS side, mostly assertion attributes that I have tried with what I have on Attributes & Claims on Azure app, but no luck :(. What I have on Azure app: What I have on AMG:
How to render column charts in Logic Apps using Run query and visualize results connector
Team, I have been trying to run a kql query and render results in column chart , but i couldnt as currently "Run query and visualize results connector" support only bar, line and pie chart ? Is there any solution for this
Azure DevOps Timeline/Roadmap Native Function
Is there a way to create a "timeline" or "roadmap" view in Azure DevOps natively, without installing and paying for an extension? A simple ask, to see Epics indivdually as rows vertically and Sprints horizontally. Epics are still limited to only being assigned to 1 sprint?Accessing a deployed NodeJS app?
I'm a complete noob to Azure. I have managed to deploy a NodeJS all to a Function App (container?). I can go into Deployment > Advanced > Kudu and then to Debug Console > CLI, and it will show a directory listing. In my case, I see: A/SP.NET /data /LogFiles /ShutdownSential /site .gitconfig gitsafedirectory.marker So I go into /site and then into /wwwroot, and I see my files: /node_modules host.json index.js The default URL for this is (I obfuscated the sensitive bits) is blahblah-func-70.azurewebsites.net. If I go to this URL I get a pretty page saying my function is running. What I need to get to is the index.js file. What URL do I use to do that? If I append /index.js to that URL, I get a 404. Thanks!how to integrate on-prem ADFS with Microsoft Entra App proxy for SSO? please anyone suggest.
i am trying to configure Microsoft Entra App proxy with on-prem ADFS. currently we are using on-prem application site with on-prem ADFS. now i want to publish site via Microsoft Entra App proxy with On-prem ADFS. please anyone suggest.Trying to create token with scope https://cnt-prod.loadtesting.azure.com
Hello. I have created a web app, and updated its permissions within Azure App registration. To be able to access Graph, and Azure Management (user impersonation) Using Microsoft.identity.Web I am able to add a downstreamAPI, and make a successful call to it. response = await downstreamApi.GetForUserAsync<HttpResponseMessage>("Azure Management", options => { options.RelativePath = relativePath; }); if (response?.IsSuccessStatusCode ?? false) { string responseData = await response.Content.ReadAsStringAsync(); } However when I try to create a token with a different scope, for example. var token = await tokenAcquisition.GetAccessTokenForUserAsync(new[] { "https://cnt-prod.loadtesting.azure.com/.default" }); The general error I get is that my app is trying to access a resource its not allowed to. However I cant find this resource at all to give it access (Within App Registration and API permissions) With Azure Load Testing, I have learned there is a resource plane and a data plane. The resource plane requires management.azure.com, but the access to the data plane requires https://cnt-prod.loadtesting.azure.com/.default (from the tests I have done in powershell). Anyone else come across this similar issue? Any assistance is greatly appreciated. Thank you
Resolving AADB2C90205 error during immediate sign-in with new Azure B2C App Registration
We are developing a multi-tenant application where users can request new business tenants through the main domain by specifying a subdomain for each. We use Graph API to automate the creation of specific App Registrations in Azure AD B2C for each tenant's subdomain. After the App Registration is created, attempting an immediate sign-in with Azure B2C results in a failure with the following error: https://webuilduat.b2clogin.com/webuilduat.onmicrosoft.com/b2c_1_susi/oauth2/v2.0/token 400 (Bad Request) "AADB2C90205: This application does not have sufficient permissions against this web resource to perform the operation." This error persists until about 30 minutes post-creation, after which sign-in functions normally. We ensure that all required scopes are correctly configured in the App Registration. This delay leads us to suspect issues with resource propagation. What causes the AADB2C90205 error specifically when attempting immediate sign-ins post-App Registration creation? Are there known strategies to mitigate this delay or expedite the propagation process so that authentication becomes promptly available after creating a new App Registration? Your insights on this would be greatly appreciated as they could significantly improve our application's user experience by reducing wait times for new tenant setups.Best practice for managing client Id and secret when developing Azure Web app
Hi all. I don't know where the best place to ask this is, but I'm developing an integration with Azure for Sharepoint access via graph api and its not entirely clear to me what the best practice is on who holds the Enterprise App client ID and secret token used by the 3rd party application that an admin grants consent to. If you've done a bunch of direct backend integrations you typically manually create the Enterprise App, and add a token, then hand the generated app ID, client ID and token to the integration application to direct you through the consent URI step. At the point its up to you to manage the app's token which can expire. My understanding is when you seek to develop an official MS Gallery App, it's the developer/vendor that sets up their own Azure Entra and manages their application's access to Graph. When an admin that uses your application wants to integrate it with Azure for whatever it does, they would pick the Gallery App, and everything related to Graph access is handled by the vendor/developers. I believe this is separate because the vendor/developer may want to manage their own SaaS service install separate from the customer/admin, and I believe Microsoft also can revoke the vendor/developer's account/tokens as well if they're being malicious. The admin can control what the app accesses in their Azure via access permissions and of course removing the app. Is this a best practice? Where can I find guidance on who and where the secret is managed? Please remember this is related to the developer of a Gallery App, not a direct integration. I understand the direct integration, it's not how I believe a Gallery App is supposed to work exactly.
