禁止访问Azure AD B2C中的应用程序

问题描述:

使用Azure AD B2C时,表面上看起来很简单.我在Azure AD B2C中注册了两个应用程序(应用程序A和应用程序B).我想限制访问权限,以便用户1可以访问App A和App B,但是用户2应该只能访问AppA.

I have what seems on the face of it a simple requirement when using Azure AD B2C. I have two applications (App A and App B) registered in Azure AD B2C. I want to restrict access so that User 1 can access both App A and App B, but User 2 should only be able to access App A.

我可以注册appRoleAssignments并按照

I can register appRoleAssignments and assign them to a user via the Azure AD Graph API with a zero id as per this question When a user logs in, I can then query these and restrict access myself, but it feels like I'm reinventing the wheel and this should be provided by B2C.

Azure AD B2C可以立即提供吗?

Is this something Azure AD B2C is able to provide out of the box?

Azure AD B2C当前不为应用程序分配提供一流的支持.

如前所述,您需要自己实现.

As you've indicated, you'll need to implement this yourself.

您可以在 Azure AD B2C反馈论坛