Dump Azure AD v2.0 Authentication Response

Q

How to build a PHP script to dump Azure AD 2.0 Authentication Response?

✍: FYIcenter.com

A

If you are use the Azure-AD-Authentication-Request-Test.html test Web form, you need to write a server side script to dump the Azure AD Authentication Response.

Here is an example of PHP script, openID_receiver.php, that dumps all attributes received in the Authentication Response:

<html><body><pre>
<?php 
$id_token = $_REQUEST["id_token"];
$code = $_REQUEST["code"];
$token = $_REQUEST["token"];
$state = $_REQUEST["state"];
$error = $_REQUEST["error"];
$error_description = $_REQUEST["error_description"];

echo "id_token: $id_token\n";
echo "code: $code\n";
echo "token: $token\n";
echo "state: $state\n";
echo "error: $error\n";
echo "error_description: $error_description\n";
?>
</pre></body></html>

Upload this script to your Web server, and use it as the redirect_uri value in the Azure-AD-Authentication-Request-Test.html test page.

Here is an example of output returned by openID_receiver.php with "response_type=id_token" in the request:

id_token: eyJ0eXAiOiJKV1Qi...eyJhdWQiOiJiMTRh...UJQrCA6qn2bXq57q...
code: AQABAAIAAACJnLyvTTQE_LkX_Hd1_HKVGtHVJwp0r3ToIvBMns4dpW31lq...
token: 
state: yyyyyy
error: 
error_description: 

See other tutorials on how to decode and validate "id_token" and "code" values.

 

Build Implicit Flow with Azure AD v2

Azure AD v2 Authentication Request Test Page

Azure AD Integration v2.0

⇑⇑ OpenID Tutorials

2019-04-03, 31526🔥, 0💬