How do you do to set a property on an Azure resour...
# azurem
millions-journalist-34868
05/16/2020, 9:00 PMHow do you do to set a property on an Azure resource which need to be computed from another property of the same resource which is only known once the resource. For instance, I want to set an uri in the IdentifierUris property of the Application resource (AzureAd), and this needs to contain the ApplicationId of the Application which I will know only once created.
k
kind-mechanic-53546
05/17/2020, 3:35 AMWhat are you computing it from?
kind-mechanic-53546
05/17/2020, 3:37 AMIn the past, I've generated it as
identifierUris = @("https://$tenantName/$webApiId")m
millions-journalist-34868
05/17/2020, 8:56 AMI am computing it from the same Application.
millions-journalist-34868
05/17/2020, 8:57 AMIt does not come from another app I created. It have to be the app id of the current app
k
kind-mechanic-53546
05/18/2020, 7:36 AMWhy does it have to be the app id of the current app?
kind-mechanic-53546
05/18/2020, 7:38 AMThe azure console uses this pattern by default, but it has not been required in that format in my experience
kind-mechanic-53546
05/18/2020, 7:39 AMMaybe a better question is, what are you trying to do?
What's your application to be used for?
m
millions-journalist-34868
05/18/2020, 7:40 AMIt is specified this way in the tutorial I am following. This tutorial is about enabling sso on a teams tab.
millions-journalist-34868
05/18/2020, 7:40 AMI need so set the Application ID URI which is suppsoed to contain the AppId.
millions-journalist-34868
05/18/2020, 4:34 PMWhat do you think @kind-mechanic-53546?
k
kind-mechanic-53546
05/18/2020, 10:06 PM@millions-journalist-34868, thanks, that makes it a bit clearer
kind-mechanic-53546
05/18/2020, 10:07 PMI believe that you should be able to just generate your own uuid for use as the id segment of the uri
kind-mechanic-53546
05/18/2020, 10:08 PMthat worked for me fine in my b2c application which uses the same flow
kind-mechanic-53546
05/18/2020, 10:10 PMe.g
<api://subdomain.example.com:6789/${uuid()}/access_as_user>kind-mechanic-53546
05/18/2020, 10:12 PMthen you can just plug that value into your manifest
Copy code
"webApplicationInfo": {
"id": "<application_GUID here>",
"resource": "<api://subdomain.example.com:6789/>>>UUID generated previously<<"
}kind-mechanic-53546
05/18/2020, 10:12 PMI'm pretty confident this should work
m
millions-journalist-34868
05/19/2020, 6:51 AMThanks I will give it a try ! How did you do to create the scope access_as_user using Pulumi in your case ? It seems terraform azure ad provider used by Pulumi does not support exposing an api yet, so I was planning to look at how to create it using powershell.
k
kind-mechanic-53546
05/19/2020, 10:12 PMI didn't 😞
kind-mechanic-53546
05/19/2020, 10:13 PMThis was all done using powershell as TF and Pulumi don't support ms graph api as yet
kind-mechanic-53546
05/19/2020, 10:15 PMI adapted this script to create a trust framework app and proxy and upload custom policies for a B2C app
m
millions-journalist-34868
05/20/2020, 6:56 AMOkay understood, thanks for the answer.
3 Views