Services: active-directory platforms: Android author: danieldobalian level: 100 client: Android Mobile App service: Microsoft Graph
endpoint: AAD V2
|Getting Started||Library||API Reference||Support|
The MSAL Android preview gives your app the ability to begin using the Microsoft Azure Cloud by supporting Microsoft Azure Active Directory and Microsoft Accounts in a converged experience using industry standard OAuth2 and OpenID Connect. This sample demonstrates all the normal lifecycles your application should experience, including:
- Get a token for the Microsoft Graph
- Refresh a token
- Call the Microsoft Graph
- Sign out the user
This app is a multi-tenant app meaning it can be used by any Azure AD tenant or Microsoft Account. It demonstrates how a developer can build apps to connect with enterprise users and access their Azure + O365 data via the Microsoft Graph. During the auth flow, end users will be required to sign in and consent to the permissions of the application, and in some cases may require an admin to consent to the app. The majority of the logic in this sample shows how to auth an end user and make a basic call to the Microsoft Graph.
// Initialize your app with MSAL PublicClientApplication pApp = new PublicClientApplication( this.getApplicationContext(), R.raw.auth_config); // Perform authentication requests pApp.acquireToken(getActivity(), SCOPES, getAuthInteractiveCallback()); // ... // Get tokens to call APIs like the Microsoft Graph authenticationResult.getAccessToken();
Optional: Register your App
The app comes pre-configured for trying the sample. If you would like to register your own app, please follow the steps below.
You will need to have a native client application registered with Microsoft using the App Registration Portal.
To create an app,
1. Click the
Add an app button inside the Converged Apps section.
Name your app and select
- Do not check `Let us help you get started.
- After the app is created, you'll land on your app management page.
Add Platform, then select
- The Redirect URI produced is needed when making Auth requests. If you're using MSAL, it will be automatically constructed by the library unless you do a custom configuration.
Redirect/Reply URIfor when you clone the code:
- Add the
Application/Client IDto the AndroidManifest.xml's
- Add the
Application/Client IDto the
- Add the
Redirect/Reply URIto the
- Add the
Steps to Run
- Clone the code.
git clone https://github.com/Azure-Samples/active-directory-android-native-v2
Open Android Studio 3, and select open an existing Android Studio project. Find the cloned project and open it.
Select Build > Clean Project.
Select Run > Run 'app'. Make sure the emulator you're using has Chrome, if it doesn't follow these steps.
Feedback, Community Help, and Support
We use Stack Overflow with the community to provide support. We highly recommend you ask your questions on Stack Overflow first and browse existing issues to see if someone has asked your question before.
If you find and bug or have a feature request, please raise the issue on GitHub Issues.
To provide a recommendation, visit our User Voice page.
We enthusiastically welcome contributions and feedback. You can clone the repo and start contributing now. Read our Contribution Guide for more information.
This library controls how users sign-in and access services. We recommend you always take the latest version of our library in your app when possible. We use semantic versioning so you can control the risk associated with updating your app. As an example, always downloading the latest minor version number (e.g. x.y.x) ensures you get the latest security and feature enhanements but our API surface remains the same. You can always see the latest version and release notes under the Releases tab of GitHub.
If you find a security issue with our libraries or services please report it to email@example.com with as much detail as possible. Your submission may be eligible for a bounty through the Microsoft Bounty program. Please do not post security issues to GitHub Issues or any other public site. We will contact you shortly upon receiving the information. We encourage you to get notifications of when security incidents occur by visiting this page and subscribing to Security Advisory Alerts.