Authentication with Microsoft Account

1. Register a AAD app in the Azure Active Directory > App registrations area of the Azure portal.
2. Provide a Name for the app (for example, kmlog-<username>).
3. In Supported account types, select Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox).
4. Leave the Redirect URI drop down set to Web and provide the following redirect URI:
   • Dev: http://localhost/signin-microsoft
   • Other: https://<DOMAIN>/signin-microsoft
5. Select Register. (the following steps are in the newly registered app)
6. Check Application (client) ID in Overview.
7. Add Client Secret in Certificates & Secrets.
8. Store Client Id and Client Secret in appsettings.json or secrets.json (app secrets) of KmLog.Server.WebApi in the following format:

{
    "Azure": {
        "ClientId": "<CLIENT_ID>",
        "ClientSecret": "<CLIENT_SECRET>"
    }
}

Use the docker-compose in KmLog.Server\docker-compose.database as mssql database.

docker-compose up

Add emails of authorized Microsoft account(s):

• Manually insert into database

insert into [User]
  (Id, Email, Role)
values
  (newid(), 'valid@email.com', 0)

• Add comma-separated list via command line arguments: ("valid@email.com,...")