Unless I'm not seeing this correctly - I'm hoping someone can correct me here, this has been a 3 year frustration in trying to apply Azure Active Directory to Mobile Servcies / Mobile Apps - just about at a melting down point... every project I try to implement and fail and I just don't think it can be done as advertised...
I'm having real trouble finding help, how to use Active Directory to Authorize ( not Authenticate ) User Groups to a Mobile Services ( or ideally Mobile Apps ) .Net Backend Controller.
I just want to add users to an Azure Active Directory Group and then on the Mobile Apps Backend put the attribute
[Authorize Group = "SomeGroupName"] at top of controller and that's that.
But no, we are going to have to create our own database tables of UserGroups and then assign Active Directory UserID's to groups, and then write functions to check If the authenticated User is in the Group ON EACH AND EVERY Method call... really bad in my opinion. Makes the User Groups part of Azure Active Directory really useless for Authorization and frustrating.
otherwise ,regarding authorization, there is no point in using AD over Gmail or facebook since the usefulness of AD really is exactly the same as Gmail ... getting a userID and that's it. Someone please correct me I know someone somewhere is using AD to Authenticate AND Authorize backend method calls...