Skip to main content Accueil Créateurs beko2210 firstbrain microsoft-azure-webjobs-extensions-authentication-events-dotnet
microsoft-azure-webjobs-extensions-authentication-events-dotnet Microsoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions.
Aller à l'installation Skills Marketplace Découvrez et explorez les compétences IA créées par la communauté.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Afficher les détails du prompt Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/BEKO2210/Firstbrain --skill microsoft-azure-webjobs-extensions-authentication-events-dotnetLa commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
Télécharger Zip Téléchargement... Métiers associés SOC
Basé sur la classification professionnelle SOC
name microsoft-azure-webjobs-extensions-authentication-events-dotnet description Microsoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions. type skill created 2026-02-27T00:00:00.000Z domain cloud-infrastructure category azure risk unknown source community tags ["skill","cloud-infrastructure","azure","microsoft","webjobs"]
Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents (.NET)
Azure Functions extension for handling Microsoft Entra ID custom authentication events.
Installation
dotnet add package Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents
Current Version : v1.1.0 (stable)
Supported Events
Event Purpose OnTokenIssuanceStartAdd custom claims to tokens during issuance OnAttributeCollectionStartCustomize attribute collection UI before display OnAttributeCollectionSubmitValidate/modify attributes after user submission OnOtpSendCustom OTP delivery (SMS, email, etc.)
Core Workflows
1. Token Enrichment (Add Custom Claims)
Add custom claims to access or ID tokens during sign-in.
using Microsoft.Azure.WebJobs;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents.TokenIssuanceStart;
using Microsoft.Extensions.Logging;
public static class TokenEnrichmentFunction
{
[FunctionName("OnTokenIssuanceStart" ) ]
public static WebJobsAuthenticationEventResponse Run (
[WebJobsAuthenticationEventsTrigger] WebJobsTokenIssuanceStartRequest request,
ILogger log )"Token issuance event for user: {UserId}" ,
request.Data?.AuthenticationContext?.User?.Id);
var response = new WebJobsTokenIssuanceStartResponse();
response.Actions.Add(new
new
string
string
"customClaim1"
"customValue1"
"department"
"Engineering"
"costCenter"
"CC-12345"
"apiVersion"
"v2"
return
2. Token Enrichment with External Data Fetch claims from external systems (databases, APIs).
using Microsoft.Azure.WebJobs;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents.TokenIssuanceStart;
using Microsoft.Extensions.Logging;
using System.Net.Http;
using System.Text.Json;
public static class TokenEnrichmentWithExternalData
{
private static readonly HttpClient _httpClient = new ();
[FunctionName("OnTokenIssuanceStartExternal" ) ]
public static async Task<WebJobsAuthenticationEventResponse> Run (
[WebJobsAuthenticationEventsTrigger] WebJobsTokenIssuanceStartRequest request,
ILogger log )string ? userId = request.Data?.AuthenticationContext?.User?.Id;
if (string .IsNullOrEmpty(userId))
{
log.LogWarning("No user ID in request" );
return new WebJobsTokenIssuanceStartResponse();
}
var userProfile = await GetUserProfileAsync(userId);
var response = new WebJobsTokenIssuanceStartResponse();
response.Actions.Add(new WebJobsProvideClaimsForToken
{
Claims = new Dictionary<string , string >
{
{ "employeeId" , userProfile.EmployeeId },
{ "department" , userProfile.Department },
{ "roles" , string .Join("," , userProfile.Roles) }
}
});
return response;
}
private static async Task<UserProfile> GetUserProfileAsync (string userIdvar response = await _httpClient.GetAsync($"https://api.example.com/users/{userId} " );
response.EnsureSuccessStatusCode();
var json = await response.Content.ReadAsStringAsync();
return JsonSerializer.Deserialize<UserProfile>(json)!;
}
}
public record UserProfile (string EmployeeId, string Department, string [] Roles
3. Attribute Collection - Customize UI (Start Event) Customize the attribute collection page before it's displayed.
using Microsoft.Azure.WebJobs;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents.Framework;
using Microsoft.Extensions.Logging;
public static class AttributeCollectionStartFunction
{
[FunctionName("OnAttributeCollectionStart" ) ]
public static WebJobsAuthenticationEventResponse Run (
[WebJobsAuthenticationEventsTrigger] WebJobsAttributeCollectionStartRequest request,
ILogger log )"Attribute collection start for correlation: {CorrelationId}" ,
request.Data?.AuthenticationContext?.CorrelationId);
var response = new WebJobsAttributeCollectionStartResponse();
response.Actions.Add(new WebJobsContinueWithDefaultBehavior());
return response;
}
}
4. Attribute Collection - Validate Submission (Submit Event) Validate and modify attributes after user submission.
using Microsoft.Azure.WebJobs;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents.Framework;
using Microsoft.Extensions.Logging;
public static class AttributeCollectionSubmitFunction
{
[FunctionName("OnAttributeCollectionSubmit" ) ]
public static WebJobsAuthenticationEventResponse Run (
[WebJobsAuthenticationEventsTrigger] WebJobsAttributeCollectionSubmitRequest request,
ILogger log )var response = new WebJobsAttributeCollectionSubmitResponse();
var attributes = request.Data?.UserSignUpInfo?.Attributes;
string ? email = attributes?["email" ]?.ToString();
string ? displayName = attributes?["displayName" ]?.ToString();
if (email?.EndsWith("@blocked.com" ) == true )
{
response.Actions.Add(new WebJobsShowBlockPage
{
Message = "Sign-up from this email domain is not allowed."
});
return response;
}
if (string .IsNullOrEmpty(displayName) || displayName.Length < 3 )
{
response.Actions.Add(new WebJobsShowValidationError
{
Message = "Display name must be at least 3 characters." ,
AttributeErrors = new Dictionary<string , string >
{
{ "displayName" , "Name is too short" }
}
});
return response;
}
response.Actions.Add(new WebJobsModifyAttributeValues
{
Attributes = new Dictionary<string , string >
{
{ "displayName" , displayName.Trim() },
{ "city" , attributes?["city" ]?.ToString()?.ToUpperInvariant() ?? "" }
}
});
return response;
}
}
5. Custom OTP Delivery Send one-time passwords via custom channels (SMS, email, push notification).
using Microsoft.Azure.WebJobs;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents;
using Microsoft.Azure.WebJobs.Extensions.AuthenticationEvents.Framework;
using Microsoft.Extensions.Logging;
public static class CustomOtpFunction
{
[FunctionName("OnOtpSend" ) ]
public static async Task<WebJobsAuthenticationEventResponse> Run (
[WebJobsAuthenticationEventsTrigger] WebJobsOnOtpSendRequest request,
ILogger log )var response = new WebJobsOnOtpSendResponse();
string ? phoneNumber = request.Data?.OtpContext?.Identifier;
string ? otp = request.Data?.OtpContext?.OneTimeCode;
if (string .IsNullOrEmpty(phoneNumber) || string .IsNullOrEmpty(otp))
{
log.LogError("Missing phone number or OTP" );
response.Actions.Add(new WebJobsOnOtpSendFailed
{
Error = "Missing required data"
});
return response;
}
try
{
await SendSmsAsync(phoneNumber, $"Your verification code is: {otp} " );
response.Actions.Add(new WebJobsOnOtpSendSuccess());
log.LogInformation("OTP sent successfully to {PhoneNumber}" , phoneNumber);
}
catch (Exception ex)
{
log.LogError(ex, "Failed to send OTP" );
response.Actions.Add(new WebJobsOnOtpSendFailed
{
Error = "Failed to send verification code"
});
}
return response;
}
private static async Task SendSmsAsync (string phoneNumber, string messageawait Task.CompletedTask;
}
}
6. Function App Configuration Configure the Function App for authentication events.
using Microsoft.Extensions.Hosting;
var host = new HostBuilder()
.ConfigureFunctionsWorkerDefaults()
.Build();
host.Run();
{
"version" : "2.0" ,
"logging" : {
"applicationInsights" : {
"samplingSettings" : {
"isEnabled" : true }
}
} ,
"extensions" : {
"http" : {
"routePrefix" : ""
}
}
}
{
"IsEncrypted" : false ,
"Values" : {
"AzureWebJobsStorage" : "UseDevelopmentStorage=true" ,
"FUNCTIONS_WORKER_RUNTIME" : "dotnet"
}
}
Key Types Reference Type Purpose WebJobsAuthenticationEventsTriggerAttributeFunction trigger attribute WebJobsTokenIssuanceStartRequestToken issuance event request WebJobsTokenIssuanceStartResponseToken issuance event response WebJobsProvideClaimsForTokenAction to add claims WebJobsAttributeCollectionStartRequestAttribute collection start request WebJobsAttributeCollectionStartResponseAttribute collection start response WebJobsAttributeCollectionSubmitRequestAttribute submission request WebJobsAttributeCollectionSubmitResponseAttribute submission response WebJobsSetPrefillValuesPrefill form values WebJobsShowBlockPageBlock user with message WebJobsShowValidationErrorShow validation errors WebJobsModifyAttributeValuesModify submitted values WebJobsOnOtpSendRequestOTP send event request WebJobsOnOtpSendResponseOTP send event response WebJobsOnOtpSendSuccessOTP sent successfully WebJobsOnOtpSendFailedOTP send failed WebJobsContinueWithDefaultBehaviorContinue with default flow
Entra ID Configuration After deploying your Function App, configure the custom extension in Entra ID:
Register the API in Entra ID → App registrationsCreate Custom Authentication Extension in Entra ID → External Identities → Custom authentication extensionsLink to User Flow in Entra ID → External Identities → User flows
Required App Registration Settings Expose an API:
- Application ID URI: api://<your-function-app-name>.azurewebsites.net
- Scope: CustomAuthenticationExtension.Receive.Payload
API Permissions:
- Microsoft Graph: User.Read (delegated)
Best Practices
Validate all inputs — Never trust request data; validate before processingHandle errors gracefully — Return appropriate error responsesLog correlation IDs — Use CorrelationId for troubleshootingKeep functions fast — Authentication events have timeout limitsUse managed identity — Access Azure resources securelyCache external data — Avoid slow lookups on every requestTest locally — Use Azure Functions Core Tools with sample payloadsMonitor with App Insights — Track function execution and errors
Error Handling [FunctionName("OnTokenIssuanceStart" ) ]
public static WebJobsAuthenticationEventResponse Run (
[WebJobsAuthenticationEventsTrigger] WebJobsTokenIssuanceStartRequest request,
ILogger log )try
{
var response = new WebJobsTokenIssuanceStartResponse();
response.Actions.Add(new WebJobsProvideClaimsForToken
{
Claims = new Dictionary<string , string > { { "claim" , "value" } }
});
return response;
}
catch (Exception ex)
{
log.LogError(ex, "Error processing token issuance event" );
return new WebJobsTokenIssuanceStartResponse();
}
}
Related SDKs SDK Purpose Install Microsoft.Azure.WebJobs.Extensions.AuthenticationEventsAuth events (this SDK) dotnet add package Microsoft.Azure.WebJobs.Extensions.AuthenticationEventsMicrosoft.Identity.WebWeb app authentication dotnet add package Microsoft.Identity.WebAzure.IdentityAzure authentication dotnet add package Azure.Identity
Reference Links
When to Use This skill is applicable to execute the workflow or actions described in the overview.
Connections
Domain: [[Cloud & Infrastruktur]]Kategorie: [[Microsoft Azure]]Navigation: [[Skills Uebersicht]], [[Home]] 