Web app with Entra authentication got 403 error

Hi @Ben Wilson,

From the sign-in activities we know that the authentication process has been successful, so the logs we see are all login successes.

The 403 is because the authorization did not pass, and we need to check your Program.cs code. It should be code issue, we need to check it first.

Best Regards

Jason

Jason,

Thanks for the confirmation. I did not make any changes to Program.cs before I got the error. Could you tell me where else I should check? Is there a log for requests that failed authorization?

The Program.cs is mostly boiler-plate code. Here they are.

builder.Services.AddAuthorization(o =>

{

o.AddPolicy("IsUser", o => o.RequireRole("Role.User"));

o.DefaultPolicy = o.GetPolicy("IsUser")!;

o.FallbackPolicy = o.DefaultPolicy;

});

builder.Services.AddRazorPages().AddMicrosoftIdentityUI();

var app = builder.Build();

if (!app.Environment.IsDevelopment())

{

app.UseExceptionHandler("/Error");

app.UseHsts();

}

app.UseHttpsRedirection();

app.UseStaticFiles();

app.UseRouting();

app.UseAuthentication();

app.UseAuthorization();

app.MapRazorPages();

app.MapControllers();

app.Run();

My Entra account has the "Role.User" role. Also, Webapp1 works fine if I run it via Visual Studio.

Best regards,

Ben

<duplicate>

<duplicate>