DEV Community

Discussion on: Secure Open API (Swagger) calls with Azure Active Directory

Collapse
 
herecomeslappy profile image
Lappy

All this can be achieved using only one single application not the two.

You create one Single Page App on Azure AD. You create a scope in that app. Make roles and assign them to your users. They you just put the same app Id for both OpenIdClientId and ClientId and so it can use the same app to authenticate as well as the API can use it.