How do you do to set a property on an Azure resource which n

Question

How do you do to set a property on an Azure resource which need to be computed from another property of the same resource which is only known once the resource For instance I want to set an uri in the IdentifierUris property of the Application resource AzureAd and this needs to contain the ApplicationId of the Application which I will know only once created

kind-mechanic-53546 · Answer

What are you computing it from

kind-mechanic-53546 · Answer

In the past I ve generated it as `identifierUris = https $tenantName $webApiId ` where webApiId is just a new UUID which is saved and passed to another app

millions-journalist-34868 · Answer

I am computing it from the same Application

millions-journalist-34868 · Answer

It does not come from another app I created It have to be the app id of the current app

kind-mechanic-53546 · Answer

Why does it have to be the app id of the current app

kind-mechanic-53546 · Answer

The azure console uses this pattern by default but it has not been required in that format in my experience

kind-mechanic-53546 · Answer

Maybe a better question is what are you trying to do What s your application to be used for

millions-journalist-34868 · Answer

It is specified this way in the tutorial I am following This tutorial is about enabling <https docs microsoft com en us microsoftteams platform tabs how to authentication auth aad sso|sso on a teams tab>

millions-journalist-34868 · Answer

I need so set the Application ID URI which is suppsoed to contain the AppId

millions-journalist-34868 · Answer

What do you think < kind mechanic 53546>

kind-mechanic-53546 · Answer

< millions journalist 34868> thanks that makes it a bit clearer

kind-mechanic-53546 · Answer

I believe that you should be able to just generate your own uuid for use as the id segment of the uri

kind-mechanic-53546 · Answer

that worked for me fine in my b2c application which uses the same flow

kind-mechanic-53546 · Answer

e g `<api subdomain example com 6789 $ uuid access as user>`

kind-mechanic-53546 · Answer

then you can just plug that value into your manifest ``` webApplicationInfo id lt application GUID here gt resource <api subdomain example com 6789 > gt gt UUID generated previously lt lt ```

kind-mechanic-53546 · Answer

I m pretty confident this should work

millions-journalist-34868 · Answer

Thanks I will give it a try How did you do to create the scope access as user using Pulumi in your case It seems terraform azure ad provider used by Pulumi does not <https github com terraform providers terraform provider azuread pull 252|support exposing an api yet> so I was planning to look at how to create it using powershell

kind-mechanic-53546 · Answer

I didn t disappointed

kind-mechanic-53546 · Answer

This was all done using powershell as TF and Pulumi don t support ms graph api as yet

kind-mechanic-53546 · Answer

I adapted <https github com Azure Samples active directory external identities woodgrove demo blob master Scripts New B2CTenant New B2CTenant ps1|this> script to create a trust framework app and proxy and upload custom policies for a B2C app

millions-journalist-34868 · Answer

Okay understood thanks for the answer