();
42 |
43 | LoadApplication(new App());
44 | }
45 | public override void OnRequestPermissionsResult(int requestCode, string[] permissions, [GeneratedEnum] Android.Content.PM.Permission[] grantResults)
46 | {
47 | Xamarin.Essentials.Platform.OnRequestPermissionsResult(requestCode, permissions, grantResults);
48 |
49 | base.OnRequestPermissionsResult(requestCode, permissions, grantResults);
50 | }
51 |
52 | ///
53 | /// This is a callback to continue with the broker base authentication
54 | /// Info abour redirect URI: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-client-application-configuration#redirect-uri
55 | ///
56 | /// request code
57 | /// result code
58 | /// intent of the actvity
59 | protected override void OnMAMActivityResult(int requestCode, [GeneratedEnum] Result resultCode, Intent data)
60 | {
61 | base.OnMAMActivityResult(requestCode, resultCode, data);
62 | AuthenticationContinuationHelper.SetAuthenticationContinuationEventArgs(requestCode, resultCode, data);
63 | }
64 |
65 | }
66 | }
67 |
--------------------------------------------------------------------------------
/3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.iOS/Info.plist:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | CFBundleDisplayName
6 | Xamarin Intune Sample
7 | CFBundleIdentifier
8 | com.yourcompany.XamarinIntuneApp
9 | CFBundleName
10 | active_directory_xamarin_intune
11 | CFBundleURLTypes
12 |
13 |
14 | CFBundleURLSchemes
15 |
16 | msauth.com.yourcompany.XamarinIntuneApp
17 | msauth.com.yourcompany.XamarinIntuneApp-intunemam
18 | msauth.com.microsoft.intunemam
19 |
20 |
21 |
22 | CFBundleVersion
23 | 1.0
24 | IntuneMAMSettings
25 |
26 | ADALAuthority
27 | https://login.microsoftonline.com/organizations
28 | ADALClientId
29 | TODO - Your Client Id
30 | ADALRedirectUri
31 | msauth.com.yourcompany.XamarinIntuneApp://auth
32 |
33 | LSApplicationQueriesSchemes
34 |
35 | scmx
36 | smsec
37 | microsoft-edge-http
38 | microsoft-edge-http-intunemam
39 | lookoutwork-ase
40 | mvisionmobile
41 | skycure
42 | companyportal
43 | lacoonsecurity
44 | msauthv2
45 | wandera
46 | betteractiveshield
47 | msauthv3
48 | microsoft-edge-https
49 | microsoft-edge-https-intunemam
50 | zips
51 | ms-outlook
52 | ms-outlook-intunemam
53 | smart-ns
54 | https-intunemam
55 | http-intunemam
56 |
57 | MinimumOSVersion
58 | 12.2
59 | UIDeviceFamily
60 |
61 | 1
62 | 2
63 |
64 | UILaunchStoryboardName
65 | LaunchScreen
66 | UISupportedInterfaceOrientations
67 |
68 | UIInterfaceOrientationPortrait
69 | UIInterfaceOrientationLandscapeLeft
70 | UIInterfaceOrientationLandscapeRight
71 |
72 | UISupportedInterfaceOrientations~ipad
73 |
74 | UIInterfaceOrientationPortrait
75 | UIInterfaceOrientationPortraitUpsideDown
76 | UIInterfaceOrientationLandscapeLeft
77 | UIInterfaceOrientationLandscapeRight
78 |
79 | XSAppIconAssets
80 | Assets.xcassets/AppIcon.appiconset
81 |
82 |
83 |
--------------------------------------------------------------------------------
/MauiApps.md:
--------------------------------------------------------------------------------
1 | # MAUI Sample Apps
2 | This file is readme for MAUI sample apps. **It currently supports only iOS, Android, and Windows platforms.**.
3 | A preview package has been published on NuGet. [Microsoft.Identity.Client 4.47.0]( https://www.nuget.org/packages/Microsoft.Identity.Client/4.47.0)
4 |
5 |
6 | ## Prerequisites
7 | To build and run the branch, it will require:
8 | - Visual Studio 2022 Release 17.3.5
9 | - Mac with **XCode 13.3** to compile iOS Apps. Note: Support for XCode 14.0 for MAUI is in RC.
10 |
11 | # Getting started
12 | - Clone this repository
13 | `git clone https://github.com/Azure-Samples/active-directory-xamarin-native-v2.git`
14 | > Given that the name of the sample is pretty long, and so are the name of the referenced NuGet packages, you might want to clone it in a folder close to the root of your hard drive, to avoid file size limitations on Windows.
15 | - Open Visual Studio 2022
16 | - Open the solution
17 | `/MAUI/MauiApps.sln`
18 | - It contains the following projects:
19 |
20 | - MauiAppBasic
21 | This shows how to perform authentication with no broker. It has the common pattern of Acquire Token Silent (ATS) + Acquire Token Interactive (ATI). Note: Android does not support the embedded browser.
22 | - MauiAppWithBroker
23 | This shows how to perform authentication with broker. It has the common pattern of ATS + ATI.
24 | - MauiAppB2C
25 | This shows how to perform authentication with OAuth providers such as Google, Facebook, Microsoft Personal account. It has the common pattern of ATS + ATI.
26 |
27 | ### MauiAppBasic
28 | This performs basic authentication using ATS + ATI flow. There is no broker involved.
29 | The repro steps are:
30 | 1. ATS + ATI
31 | 2. ATS
32 | 3. Logout followed by ATS + ATI
33 |
34 |
35 | The results are as follows:
36 |
37 |
40 |
41 | | Platform | Status |
42 | | ----------- | ----------- |
43 | | iOS (System) | **Works** |
44 | | iOS (Embedded) | **Works** |
45 | | Android (System) | **Works** |
46 | | Android (Embedded) | **Works** |
47 | | WinUI3 | **Works** |
48 |
49 |
50 | ### MauiAppBroker
51 | This performs basic authentication using ATS + ATI flow using broker.
52 | The repro steps are:
53 | 1. ATS + ATI
54 | 2. ATS
55 | 3. Logout followed by ATS + ATI
56 |
57 |
58 | The results are as follows:
59 |
60 |
63 |
64 | | Platform | Status |
65 | | ----------- | ----------- |
66 | | iOS | **Works** |
67 | | Android | **Works** |
68 | | WinUI3 | **Works** |
69 |
70 |
71 | ### MauiAppB2C
72 | This performs basic authentication using ATS + ATI flow using external identity providers.
73 | The repro steps are:
74 | 1. ATS + ATI
75 | 2. ATS
76 | 3. Logout followed by ATS + ATI
77 |
78 |
79 | The results are as follows:
80 |
81 |
84 |
85 | | Platform | Status |
86 | | ----------- | ----------- |
87 | | iOS | **Works** |
88 | | Android | **Works** |
89 | | WinUI3 | **Works** |
90 |
91 |
--------------------------------------------------------------------------------
/3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.Android/EnrollmentNotificationReceiver.cs:
--------------------------------------------------------------------------------
1 | // Copyright (c) Microsoft Corporation. All rights reserved.
2 | // Licensed under the MIT License.
3 |
4 | using System;
5 | using System.Diagnostics;
6 | using activedirectoryxamarinintune;
7 | using Android.Runtime;
8 | using Android.Util;
9 | using Microsoft.Intune.Mam.Client.Notification;
10 | using Microsoft.Intune.Mam.Policy;
11 | using Microsoft.Intune.Mam.Policy.Notification;
12 |
13 | namespace active_directory_xamarin_intune.Droid
14 | {
15 | ///
16 | /// Receives enrollment notifications from the Intune service and performs the corresponding action for the enrollment result.
17 | /// See: https://docs.microsoft.com/en-us/intune/app-sdk-android#mamnotificationreceiver
18 | ///
19 | class EnrollmentNotificationReceiver : Java.Lang.Object, IMAMNotificationReceiver
20 | {
21 | ///
22 | /// When using the MAM-WE APIs found in IMAMEnrollManager, your app wil receive
23 | /// IMAMEnrollmentNotifications back to signal the result of your calls.
24 | /// When enrollment is successful, this will signal that app has been registered and it can proceed ahead.
25 | ///
26 | /// The notification that was received.
27 | ///
28 | /// The receiver should return true if it handled the notification without error(or if it decided to ignore the notification).
29 | /// If the receiver tried to take some action in response to the notification but failed to complete that action it should return false.
30 | ///
31 | public bool OnReceive(IMAMNotification notification)
32 | {
33 | Debug.WriteLine("***Begin EnrollmentNotificationReceiver -> OnReceive");
34 | if (notification.Type == MAMNotificationType.MamEnrollmentResult)
35 | {
36 | Debug.WriteLine("***Begin EnrollmentNotificationReceiver -> OnReceive (notification.Type == MAMNotificationType.MamEnrollmentResult)");
37 | IMAMEnrollmentNotification enrollmentNotification = notification.JavaCast();
38 | MAMEnrollmentManagerResult result = enrollmentNotification.EnrollmentResult;
39 | Debug.WriteLine($"***Begin OnReceive-> Enrollment = {result} Code = {result.Code}");
40 | }
41 | else if (notification.Type == MAMNotificationType.ComplianceStatus)
42 | {
43 | Debug.WriteLine("***Begin EnrollmentNotificationReceiver -> OnReceive (notification.Type == MAMNotificationType.ComplianceStatus)");
44 | IMAMComplianceNotification complianceNotification = notification.JavaCast();
45 | MAMCAComplianceStatus result = complianceNotification.ComplianceStatus;
46 | Debug.WriteLine($"***Begin OnReceive-> Compliance = {result} Code = {result.Code}");
47 | if (result.Equals(MAMCAComplianceStatus.Compliant))
48 | {
49 | Log.Info(GetType().Name, "remediateCompliance succeeded; status = " + result);
50 | Debug.WriteLine("***Begin OnReceive-> Compliant");
51 | // this signals that MAM registration is complete and the app can proceed
52 | PCAWrapper.MAMRegsiteredEvent.Set();
53 | }
54 | else
55 | {
56 | Log.Info(GetType().Name, "remediateCompliance failed; status = " + result);
57 | Log.Info(GetType().Name, complianceNotification.ComplianceErrorTitle);
58 | Log.Info(GetType().Name, complianceNotification.ComplianceErrorMessage);
59 | }
60 | }
61 |
62 | return true;
63 | }
64 | }
65 | }
66 |
--------------------------------------------------------------------------------
/2-With-broker/.gitignore:
--------------------------------------------------------------------------------
1 | ## Ignore Visual Studio temporary files, build results, and
2 | ## files generated by popular Visual Studio add-ons.
3 |
4 | # User-specific files
5 | *.suo
6 | *.user
7 | *.userosscache
8 | *.sln.docstates
9 |
10 | # User-specific files (MonoDevelop/Xamarin Studio)
11 | *.userprefs
12 |
13 | # Build results
14 | [Dd]ebug/
15 | [Dd]ebugPublic/
16 | [Rr]elease/
17 | [Rr]eleases/
18 | x64/
19 | x86/
20 | build/
21 | bld/
22 | [Bb]in/
23 | [Oo]bj/
24 |
25 | # Visual Studo 2015 cache/options directory
26 | .vs/
27 |
28 | # MSTest test Results
29 | [Tt]est[Rr]esult*/
30 | [Bb]uild[Ll]og.*
31 |
32 | # NUNIT
33 | *.VisualState.xml
34 | TestResult.xml
35 |
36 | # Build Results of an ATL Project
37 | [Dd]ebugPS/
38 | [Rr]eleasePS/
39 | dlldata.c
40 |
41 | *_i.c
42 | *_p.c
43 | *_i.h
44 | *.ilk
45 | *.meta
46 | *.obj
47 | *.pch
48 | *.pdb
49 | *.pgc
50 | *.pgd
51 | *.rsp
52 | *.sbr
53 | *.tlb
54 | *.tli
55 | *.tlh
56 | *.tmp
57 | *.tmp_proj
58 | *.log
59 | *.vspscc
60 | *.vssscc
61 | .builds
62 | *.pidb
63 | *.svclog
64 | *.scc
65 |
66 | # Chutzpah Test files
67 | _Chutzpah*
68 |
69 | # Visual C++ cache files
70 | ipch/
71 | *.aps
72 | *.ncb
73 | *.opensdf
74 | *.sdf
75 | *.cachefile
76 |
77 | # Visual Studio profiler
78 | *.psess
79 | *.vsp
80 | *.vspx
81 |
82 | # TFS 2012 Local Workspace
83 | $tf/
84 |
85 | # Guidance Automation Toolkit
86 | *.gpState
87 |
88 | # ReSharper is a .NET coding add-in
89 | _ReSharper*/
90 | *.[Rr]e[Ss]harper
91 | *.DotSettings.user
92 |
93 | # JustCode is a .NET coding addin-in
94 | .JustCode
95 |
96 | # TeamCity is a build add-in
97 | _TeamCity*
98 |
99 | # DotCover is a Code Coverage Tool
100 | *.dotCover
101 |
102 | # NCrunch
103 | _NCrunch_*
104 | .*crunch*.local.xml
105 |
106 | # MightyMoose
107 | *.mm.*
108 | AutoTest.Net/
109 |
110 | # Web workbench (sass)
111 | .sass-cache/
112 |
113 | # Installshield output folder
114 | [Ee]xpress/
115 |
116 | # DocProject is a documentation generator add-in
117 | DocProject/buildhelp/
118 | DocProject/Help/*.HxT
119 | DocProject/Help/*.HxC
120 | DocProject/Help/*.hhc
121 | DocProject/Help/*.hhk
122 | DocProject/Help/*.hhp
123 | DocProject/Help/Html2
124 | DocProject/Help/html
125 |
126 | # Click-Once directory
127 | publish/
128 |
129 | # Publish Web Output
130 | *.[Pp]ublish.xml
131 | *.azurePubxml
132 | # TODO: Comment the next line if you want to checkin your web deploy settings
133 | # but database connection strings (with potential passwords) will be unencrypted
134 | *.pubxml
135 | *.publishproj
136 |
137 | # NuGet Packages
138 | *.nupkg
139 | # The packages folder can be ignored because of Package Restore
140 | **/packages/*
141 | # except build/, which is used as an MSBuild target.
142 | !**/packages/build/
143 | # Uncomment if necessary however generally it will be regenerated when needed
144 | #!**/packages/repositories.config
145 |
146 | # Windows Azure Build Output
147 | csx/
148 | *.build.csdef
149 |
150 | # Windows Store app package directory
151 | AppPackages/
152 |
153 | # Others
154 | *.[Cc]ache
155 | ClientBin/
156 | [Ss]tyle[Cc]op.*
157 | ~$*
158 | *~
159 | *.dbmdl
160 | *.dbproj.schemaview
161 | *.pfx
162 | *.publishsettings
163 | node_modules/
164 | bower_components/
165 |
166 | # RIA/Silverlight projects
167 | Generated_Code/
168 |
169 | # Backup & report files from converting an old project file
170 | # to a newer Visual Studio version. Backup files are not needed,
171 | # because we have git ;-)
172 | _UpgradeReport_Files/
173 | Backup*/
174 | UpgradeLog*.XML
175 | UpgradeLog*.htm
176 |
177 | # SQL Server files
178 | *.mdf
179 | *.ldf
180 |
181 | # Business Intelligence projects
182 | *.rdl.data
183 | *.bim.layout
184 | *.bim_*.settings
185 |
186 | # Microsoft Fakes
187 | FakesAssemblies/
188 |
189 | # Node.js Tools for Visual Studio
190 | .ntvs_analysis.dat
191 |
192 | # Visual Studio 6 build log
193 | *.plg
194 |
195 | # Visual Studio 6 workspace options file
196 | *.opt
197 |
--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | ## Ignore Visual Studio temporary files, build results, and
2 | ## files generated by popular Visual Studio add-ons.
3 |
4 | # User-specific files
5 | *.suo
6 | *.user
7 | *.userosscache
8 | *.sln.docstates
9 |
10 | # User-specific files (MonoDevelop/Xamarin Studio)
11 | *.userprefs
12 |
13 | # Build results
14 | [Dd]ebug/
15 | [Dd]ebugPublic/
16 | [Rr]elease/
17 | [Rr]eleases/
18 | x64/
19 | x86/
20 | build/
21 | bld/
22 | [Bb]in/
23 | [Oo]bj/
24 |
25 | # Visual Studo 2015 cache/options directory
26 | .vs/
27 |
28 | # MSTest test Results
29 | [Tt]est[Rr]esult*/
30 | [Bb]uild[Ll]og.*
31 |
32 | # NUNIT
33 | *.VisualState.xml
34 | TestResult.xml
35 |
36 | # Build Results of an ATL Project
37 | [Dd]ebugPS/
38 | [Rr]eleasePS/
39 | dlldata.c
40 |
41 | *_i.c
42 | *_p.c
43 | *_i.h
44 | *.ilk
45 | *.meta
46 | *.obj
47 | *.pch
48 | *.pdb
49 | *.pgc
50 | *.pgd
51 | *.rsp
52 | *.sbr
53 | *.tlb
54 | *.tli
55 | *.tlh
56 | *.tmp
57 | *.tmp_proj
58 | *.log
59 | *.vspscc
60 | *.vssscc
61 | .builds
62 | *.pidb
63 | *.svclog
64 | *.scc
65 |
66 | # Chutzpah Test files
67 | _Chutzpah*
68 |
69 | # Visual C++ cache files
70 | ipch/
71 | *.aps
72 | *.ncb
73 | *.opensdf
74 | *.sdf
75 | *.cachefile
76 |
77 | # Visual Studio profiler
78 | *.psess
79 | *.vsp
80 | *.vspx
81 |
82 | # TFS 2012 Local Workspace
83 | $tf/
84 |
85 | # Guidance Automation Toolkit
86 | *.gpState
87 |
88 | # ReSharper is a .NET coding add-in
89 | _ReSharper*/
90 | *.[Rr]e[Ss]harper
91 | *.DotSettings.user
92 |
93 | # JustCode is a .NET coding addin-in
94 | .JustCode
95 |
96 | # TeamCity is a build add-in
97 | _TeamCity*
98 |
99 | # DotCover is a Code Coverage Tool
100 | *.dotCover
101 |
102 | # NCrunch
103 | _NCrunch_*
104 | .*crunch*.local.xml
105 |
106 | # MightyMoose
107 | *.mm.*
108 | AutoTest.Net/
109 |
110 | # Web workbench (sass)
111 | .sass-cache/
112 |
113 | # Installshield output folder
114 | [Ee]xpress/
115 |
116 | # DocProject is a documentation generator add-in
117 | DocProject/buildhelp/
118 | DocProject/Help/*.HxT
119 | DocProject/Help/*.HxC
120 | DocProject/Help/*.hhc
121 | DocProject/Help/*.hhk
122 | DocProject/Help/*.hhp
123 | DocProject/Help/Html2
124 | DocProject/Help/html
125 |
126 | # Click-Once directory
127 | publish/
128 |
129 | # Publish Web Output
130 | *.[Pp]ublish.xml
131 | *.azurePubxml
132 | # TODO: Comment the next line if you want to checkin your web deploy settings
133 | # but database connection strings (with potential passwords) will be unencrypted
134 | *.pubxml
135 | *.publishproj
136 |
137 | # NuGet Packages
138 | *.nupkg
139 | # The packages folder can be ignored because of Package Restore
140 | **/packages/*
141 | # except build/, which is used as an MSBuild target.
142 | !**/packages/build/
143 | # Uncomment if necessary however generally it will be regenerated when needed
144 | #!**/packages/repositories.config
145 |
146 | # Windows Azure Build Output
147 | csx/
148 | *.build.csdef
149 |
150 | # Windows Store app package directory
151 | AppPackages/
152 |
153 | # Others
154 | *.[Cc]ache
155 | ClientBin/
156 | [Ss]tyle[Cc]op.*
157 | ~$*
158 | *~
159 | *.dbmdl
160 | *.dbproj.schemaview
161 | *.pfx
162 | *.publishsettings
163 | node_modules/
164 | bower_components/
165 |
166 | # RIA/Silverlight projects
167 | Generated_Code/
168 |
169 | # Backup & report files from converting an old project file
170 | # to a newer Visual Studio version. Backup files are not needed,
171 | # because we have git ;-)
172 | _UpgradeReport_Files/
173 | Backup*/
174 | UpgradeLog*.XML
175 | UpgradeLog*.htm
176 |
177 | # SQL Server files
178 | *.mdf
179 | *.ldf
180 |
181 | # Business Intelligence projects
182 | *.rdl.data
183 | *.bim.layout
184 | *.bim_*.settings
185 |
186 | # Microsoft Fakes
187 | FakesAssemblies/
188 |
189 | # Node.js Tools for Visual Studio
190 | .ntvs_analysis.dat
191 |
192 | # Visual Studio 6 build log
193 | *.plg
194 |
195 | # Visual Studio 6 workspace options file
196 | *.opt
197 | .DS_Store
198 |
--------------------------------------------------------------------------------
/1-Basic/UserDetailsClient/UserDetailsClient.UWP/App.xaml.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.IO;
4 | using System.Linq;
5 | using System.Runtime.InteropServices.WindowsRuntime;
6 | using Windows.ApplicationModel;
7 | using Windows.ApplicationModel.Activation;
8 | using Windows.Foundation;
9 | using Windows.Foundation.Collections;
10 | using Windows.UI.Xaml;
11 | using Windows.UI.Xaml.Controls;
12 | using Windows.UI.Xaml.Controls.Primitives;
13 | using Windows.UI.Xaml.Data;
14 | using Windows.UI.Xaml.Input;
15 | using Windows.UI.Xaml.Media;
16 | using Windows.UI.Xaml.Navigation;
17 |
18 | namespace UserDetailsClient.UWP
19 | {
20 | ///
21 | /// Provides application-specific behavior to supplement the default Application class.
22 | ///
23 | sealed partial class App : Application
24 | {
25 | ///
26 | /// Initializes the singleton application object. This is the first line of authored code
27 | /// executed, and as such is the logical equivalent of main() or WinMain().
28 | ///
29 | public App()
30 | {
31 | this.InitializeComponent();
32 | this.Suspending += OnSuspending;
33 | }
34 |
35 | ///
36 | /// Invoked when the application is launched normally by the end user. Other entry points
37 | /// will be used such as when the application is launched to open a specific file.
38 | ///
39 | /// Details about the launch request and process.
40 | protected override void OnLaunched(LaunchActivatedEventArgs e)
41 | {
42 |
43 | #if DEBUG
44 | if (System.Diagnostics.Debugger.IsAttached)
45 | {
46 | this.DebugSettings.EnableFrameRateCounter = true;
47 | }
48 | #endif
49 |
50 | Frame rootFrame = Window.Current.Content as Frame;
51 |
52 | // Do not repeat app initialization when the Window already has content,
53 | // just ensure that the window is active
54 | if (rootFrame == null)
55 | {
56 | // Create a Frame to act as the navigation context and navigate to the first page
57 | rootFrame = new Frame();
58 |
59 | rootFrame.NavigationFailed += OnNavigationFailed;
60 |
61 | Xamarin.Forms.Forms.Init(e);
62 |
63 | if (e.PreviousExecutionState == ApplicationExecutionState.Terminated)
64 | {
65 | //TODO: Load state from previously suspended application
66 | }
67 |
68 | // Place the frame in the current Window
69 | Window.Current.Content = rootFrame;
70 | }
71 |
72 | if (rootFrame.Content == null)
73 | {
74 | // When the navigation stack isn't restored navigate to the first page,
75 | // configuring the new page by passing required information as a navigation
76 | // parameter
77 | rootFrame.Navigate(typeof(MainPage), e.Arguments);
78 | }
79 | // Ensure the current window is active
80 | Window.Current.Activate();
81 | }
82 |
83 | ///
84 | /// Invoked when Navigation to a certain page fails
85 | ///
86 | /// The Frame which failed navigation
87 | /// Details about the navigation failure
88 | void OnNavigationFailed(object sender, NavigationFailedEventArgs e)
89 | {
90 | throw new Exception("Failed to load Page " + e.SourcePageType.FullName);
91 | }
92 |
93 | ///
94 | /// Invoked when application execution is being suspended. Application state is saved
95 | /// without knowing whether the application will be terminated or resumed with the contents
96 | /// of memory still intact.
97 | ///
98 | /// The source of the suspend request.
99 | /// Details about the suspend request.
100 | private void OnSuspending(object sender, SuspendingEventArgs e)
101 | {
102 | var deferral = e.SuspendingOperation.GetDeferral();
103 | //TODO: Save application state and stop any background activity
104 | deferral.Complete();
105 | }
106 | }
107 | }
108 |
--------------------------------------------------------------------------------
/2-With-broker/UserDetailsClient/UserDetailsClient.UWP/App.xaml.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | using System.Collections.Generic;
3 | using System.IO;
4 | using System.Linq;
5 | using System.Runtime.InteropServices.WindowsRuntime;
6 | using Windows.ApplicationModel;
7 | using Windows.ApplicationModel.Activation;
8 | using Windows.Foundation;
9 | using Windows.Foundation.Collections;
10 | using Windows.UI.Xaml;
11 | using Windows.UI.Xaml.Controls;
12 | using Windows.UI.Xaml.Controls.Primitives;
13 | using Windows.UI.Xaml.Data;
14 | using Windows.UI.Xaml.Input;
15 | using Windows.UI.Xaml.Media;
16 | using Windows.UI.Xaml.Navigation;
17 |
18 | namespace UserDetailsClient.UWP
19 | {
20 | ///
21 | /// Provides application-specific behavior to supplement the default Application class.
22 | ///
23 | sealed partial class App : Application
24 | {
25 | ///
26 | /// Initializes the singleton application object. This is the first line of authored code
27 | /// executed, and as such is the logical equivalent of main() or WinMain().
28 | ///
29 | public App()
30 | {
31 | this.InitializeComponent();
32 | this.Suspending += OnSuspending;
33 | }
34 |
35 | ///
36 | /// Invoked when the application is launched normally by the end user. Other entry points
37 | /// will be used such as when the application is launched to open a specific file.
38 | ///
39 | /// Details about the launch request and process.
40 | protected override void OnLaunched(LaunchActivatedEventArgs e)
41 | {
42 |
43 | #if DEBUG
44 | if (System.Diagnostics.Debugger.IsAttached)
45 | {
46 | this.DebugSettings.EnableFrameRateCounter = true;
47 | }
48 | #endif
49 |
50 | Frame rootFrame = Window.Current.Content as Frame;
51 |
52 | // Do not repeat app initialization when the Window already has content,
53 | // just ensure that the window is active
54 | if (rootFrame == null)
55 | {
56 | // Create a Frame to act as the navigation context and navigate to the first page
57 | rootFrame = new Frame();
58 |
59 | rootFrame.NavigationFailed += OnNavigationFailed;
60 |
61 | Xamarin.Forms.Forms.Init(e);
62 |
63 | if (e.PreviousExecutionState == ApplicationExecutionState.Terminated)
64 | {
65 | //TODO: Load state from previously suspended application
66 | }
67 |
68 | // Place the frame in the current Window
69 | Window.Current.Content = rootFrame;
70 | }
71 |
72 | if (rootFrame.Content == null)
73 | {
74 | // When the navigation stack isn't restored navigate to the first page,
75 | // configuring the new page by passing required information as a navigation
76 | // parameter
77 | rootFrame.Navigate(typeof(MainPage), e.Arguments);
78 | }
79 | // Ensure the current window is active
80 | Window.Current.Activate();
81 | }
82 |
83 | ///
84 | /// Invoked when Navigation to a certain page fails
85 | ///
86 | /// The Frame which failed navigation
87 | /// Details about the navigation failure
88 | void OnNavigationFailed(object sender, NavigationFailedEventArgs e)
89 | {
90 | throw new Exception("Failed to load Page " + e.SourcePageType.FullName);
91 | }
92 |
93 | ///
94 | /// Invoked when application execution is being suspended. Application state is saved
95 | /// without knowing whether the application will be terminated or resumed with the contents
96 | /// of memory still intact.
97 | ///
98 | /// The source of the suspend request.
99 | /// Details about the suspend request.
100 | private void OnSuspending(object sender, SuspendingEventArgs e)
101 | {
102 | var deferral = e.SuspendingOperation.GetDeferral();
103 | //TODO: Save application state and stop any background activity
104 | deferral.Complete();
105 | }
106 | }
107 | }
108 |
--------------------------------------------------------------------------------
/3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/PCAWrapper.cs:
--------------------------------------------------------------------------------
1 | // Copyright (c) Microsoft Corporation. All rights reserved.
2 | // Licensed under the MIT License.
3 |
4 | using System;
5 | using System.Linq;
6 | using System.Threading;
7 | using System.Threading.Tasks;
8 | using Microsoft.Identity.Client;
9 | using Xamarin.Forms;
10 |
11 | namespace activedirectoryxamarinintune
12 | {
13 | ///
14 | /// This is a wrapper for PCA. It is singleton and can be utilized by both application and the MAM callback
15 | ///
16 | public class PCAWrapper
17 | {
18 |
19 | ///
20 | /// This is the singleton used by consumers
21 | ///
22 | static public PCAWrapper Instance { get; } = new PCAWrapper();
23 |
24 | internal IPublicClientApplication PCA { get; }
25 |
26 | // This event coordinates between different callbacks
27 | public static ManualResetEvent MAMRegsiteredEvent { get; } = new ManualResetEvent(false);
28 |
29 | ///
30 | /// The authority for the MSAL PublicClientApplication. Sign in will use this URL.
31 | ///
32 | private const string _authority = "https://login.microsoftonline.com/organizations"; // TODO - For single tenant app replace organizations with your tenant ID or name. Also modify ADALAuthority in info.plist
33 |
34 | // ClientID of the application
35 | private const string ClientId = "TODO "; // TODO - Replace with your client Id. And also replace in the AndroidManifest.xml
36 |
37 | private string[] clientCapabilities = { "ProtApp" }; // It is must to have these capabilities
38 |
39 | // private constructor for singleton
40 | private PCAWrapper()
41 | {
42 | // Create PCA once. Make sure that all the config parameters below are passed
43 | // ClientCapabilities - must have ProtApp
44 | PCA = PublicClientApplicationBuilder
45 | .Create(ClientId)
46 | .WithClientCapabilities(clientCapabilities)
47 | .WithAuthority(_authority)
48 | .WithBroker()
49 | .WithRedirectUri(PlatformConfigImpl.Instance.RedirectUri)
50 | .WithIosKeychainSecurityGroup("com.microsoft.adalcache")
51 | .Build();
52 | }
53 |
54 | ///
55 | /// Perform the intractive acquistion of the token for the given scope
56 | ///
57 | /// desired scopes
58 | /// Parent window
59 | ///
60 | internal async Task AcquireTokenInteractiveAsync(string[] scopes)
61 | {
62 | return await PCA.AcquireTokenInteractive(scopes)
63 | .WithParentActivityOrWindow(PlatformConfigImpl.Instance.ParentWindow)
64 | .WithUseEmbeddedWebView(true)
65 | .ExecuteAsync()
66 | .ConfigureAwait(false);
67 | }
68 |
69 | ///
70 | /// Acquire the token silently
71 | ///
72 | /// desired scopes
73 | /// Authenticaiton result
74 | public async Task AcquireTokenSilentAsync(string[] scopes)
75 | {
76 | var accts = await PCA.GetAccountsAsync().ConfigureAwait(false);
77 | var acct = accts.FirstOrDefault();
78 |
79 | var silentParamBuilder = PCA.AcquireTokenSilent(scopes, acct);
80 | var authResult = await silentParamBuilder
81 | .ExecuteAsync().ConfigureAwait(false);
82 | return authResult;
83 |
84 | }
85 |
86 | ///
87 | /// Signout may not perform the complete signout as company portal may hold
88 | /// the token.
89 | ///
90 | ///
91 | public async Task SignOut()
92 | {
93 | var accounts = await PCA.GetAccountsAsync().ConfigureAwait(false);
94 | foreach (var acct in accounts)
95 | {
96 | await PCA.RemoveAsync(acct).ConfigureAwait(false);
97 | }
98 | }
99 | }
100 | }
101 |
--------------------------------------------------------------------------------
/3-With-Intune MAM/active-directory-xamarin-intune.sln:
--------------------------------------------------------------------------------
1 |
2 | Microsoft Visual Studio Solution File, Format Version 12.00
3 | # Visual Studio Version 16
4 | VisualStudioVersion = 16.0.32802.440
5 | MinimumVisualStudioVersion = 10.0.40219.1
6 | Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "active-directory-xamarin-intune", "IntuneClient\active-directory-xamarin-intune\active-directory-xamarin-intune.csproj", "{C44C647D-BC45-4B6B-93C7-3222E3DBD633}"
7 | EndProject
8 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "active-directory-xamarin-intune.Android", "IntuneClient\active-directory-xamarin-intune.Android\active-directory-xamarin-intune.Android.csproj", "{8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}"
9 | EndProject
10 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "active-directory-xamarin-intune.iOS", "IntuneClient\active-directory-xamarin-intune.iOS\active-directory-xamarin-intune.iOS.csproj", "{EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}"
11 | EndProject
12 | Global
13 | GlobalSection(SolutionConfigurationPlatforms) = preSolution
14 | Debug|Any CPU = Debug|Any CPU
15 | Debug|iPhone = Debug|iPhone
16 | Debug|iPhoneSimulator = Debug|iPhoneSimulator
17 | Release|Any CPU = Release|Any CPU
18 | Release|iPhone = Release|iPhone
19 | Release|iPhoneSimulator = Release|iPhoneSimulator
20 | EndGlobalSection
21 | GlobalSection(ProjectConfigurationPlatforms) = postSolution
22 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
23 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Debug|Any CPU.Build.0 = Debug|Any CPU
24 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Debug|iPhone.ActiveCfg = Debug|Any CPU
25 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Debug|iPhone.Build.0 = Debug|Any CPU
26 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Debug|iPhoneSimulator.ActiveCfg = Debug|Any CPU
27 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Debug|iPhoneSimulator.Build.0 = Debug|Any CPU
28 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Release|Any CPU.ActiveCfg = Release|Any CPU
29 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Release|Any CPU.Build.0 = Release|Any CPU
30 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Release|iPhone.ActiveCfg = Release|Any CPU
31 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Release|iPhone.Build.0 = Release|Any CPU
32 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Release|iPhoneSimulator.ActiveCfg = Release|Any CPU
33 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}.Release|iPhoneSimulator.Build.0 = Release|Any CPU
34 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
35 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|Any CPU.Build.0 = Debug|Any CPU
36 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|Any CPU.Deploy.0 = Debug|Any CPU
37 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|iPhone.ActiveCfg = Debug|Any CPU
38 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|iPhone.Build.0 = Debug|Any CPU
39 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|iPhone.Deploy.0 = Debug|Any CPU
40 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|iPhoneSimulator.ActiveCfg = Debug|Any CPU
41 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|iPhoneSimulator.Build.0 = Debug|Any CPU
42 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Debug|iPhoneSimulator.Deploy.0 = Debug|Any CPU
43 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|Any CPU.ActiveCfg = Release|Any CPU
44 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|Any CPU.Build.0 = Release|Any CPU
45 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|Any CPU.Deploy.0 = Release|Any CPU
46 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|iPhone.ActiveCfg = Release|Any CPU
47 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|iPhone.Build.0 = Release|Any CPU
48 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|iPhone.Deploy.0 = Release|Any CPU
49 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|iPhoneSimulator.ActiveCfg = Release|Any CPU
50 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|iPhoneSimulator.Build.0 = Release|Any CPU
51 | {8AF40BB2-15C6-4AEA-AEF0-796FCBF8A113}.Release|iPhoneSimulator.Deploy.0 = Release|Any CPU
52 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Debug|Any CPU.ActiveCfg = Debug|iPhoneSimulator
53 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Debug|iPhone.ActiveCfg = Debug|iPhone
54 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Debug|iPhone.Build.0 = Debug|iPhone
55 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Debug|iPhone.Deploy.0 = Debug|iPhone
56 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Debug|iPhoneSimulator.ActiveCfg = Debug|iPhoneSimulator
57 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Debug|iPhoneSimulator.Build.0 = Debug|iPhoneSimulator
58 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Release|Any CPU.ActiveCfg = Release|iPhoneSimulator
59 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Release|iPhone.ActiveCfg = Release|iPhone
60 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Release|iPhone.Build.0 = Release|iPhone
61 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Release|iPhoneSimulator.ActiveCfg = Release|iPhoneSimulator
62 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}.Release|iPhoneSimulator.Build.0 = Release|iPhoneSimulator
63 | EndGlobalSection
64 | GlobalSection(SolutionProperties) = preSolution
65 | HideSolutionNode = FALSE
66 | EndGlobalSection
67 | GlobalSection(ExtensibilityGlobals) = postSolution
68 | SolutionGuid = {F6AE8938-6C77-4DD0-AF16-F4AF490FC8C7}
69 | EndGlobalSection
70 | EndGlobal
71 |
--------------------------------------------------------------------------------
/.tours/mam-sample-tour.tour:
--------------------------------------------------------------------------------
1 | {
2 | "$schema": "https://aka.ms/codetour-schema",
3 | "title": "MAM Sample tour",
4 | "steps": [
5 | {
6 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/PCAWrapper.cs",
7 | "description": "Wrapper for PCA. This is singleton and wraps the parameters and the desired methods.",
8 | "line": 14
9 | },
10 | {
11 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/PCAWrapper.cs",
12 | "description": "Event is to coordinate between MAM and MSAL",
13 | "line": 27
14 | },
15 | {
16 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/MainPage.xaml.cs",
17 | "description": "Attempt silent login.",
18 | "line": 33
19 | },
20 | {
21 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/MainPage.xaml.cs",
22 | "description": "Attempt AcquireTokenInteractive",
23 | "line": 42
24 | },
25 | {
26 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/MainPage.xaml.cs",
27 | "description": "if the resource requires app protection, this exception is thrown",
28 | "line": 47
29 | },
30 | {
31 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/MainPage.xaml.cs",
32 | "description": "This will perform platform specific registration and wait for it to complete. Do the AcquireTokenSilent after that.\r\nNext will be how it functions on iOS and Android",
33 | "line": 51
34 | },
35 | {
36 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.iOS/AppDelegate.cs",
37 | "description": "Platform specific params are registered.",
38 | "line": 35
39 | },
40 | {
41 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.iOS/AppDelegate.cs",
42 | "description": "Registers the MAM connector for iOS",
43 | "line": 40
44 | },
45 | {
46 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.iOS/AppDelegate.cs",
47 | "description": "Registers callback for the delegate",
48 | "line": 43
49 | },
50 | {
51 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.iOS/IntuneMAMConnector.cs",
52 | "description": "Reset the event, call method to make the device compliant and wait for it to finish.",
53 | "line": 14
54 | },
55 | {
56 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.iOS/MainIntuneMAMComplianceDelegate.cs",
57 | "description": "In the callback, wait for the device to become compliant and set the event. It will release the event and the app can continue.",
58 | "line": 19
59 | },
60 | {
61 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.Android/IntuneSampleApp.cs",
62 | "description": "Android tour begins here.\r\nAndroid part of MAM requires this special class to perform registration during creation.",
63 | "line": 22
64 | },
65 | {
66 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.Android/IntuneSampleApp.cs",
67 | "description": "Android requires two callbacks. One for enrollment manager and other for receiving MAM notifications.",
68 | "line": 28
69 | },
70 | {
71 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.Android/MainActivity.cs",
72 | "description": "Set platform specific params and register the MAM connectors",
73 | "line": 29
74 | },
75 | {
76 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.Android/IntuneMAMConnector.cs",
77 | "description": "This gets called on Android platform when MSAL throws IntuneAppProtectionPolicyRequiredException",
78 | "line": 20
79 | },
80 | {
81 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.Android/IntuneMAMConnector.cs",
82 | "description": "MAM SDK compliance is called here. It will result in MAMWEAuthCallback.",
83 | "line": 29
84 | },
85 | {
86 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.Android/MAMWEAuthCallback.cs",
87 | "description": "This is called back as part of compliance process. This will ask token for MAM services. Not not the original resource app was seeking. Ensure that the resource has corresct suffix. Acquire the token silenty and return it. This will not throw UIRequired exception as user would have already authenticated for the original resource.\r\nAfter receiving the token, MAM will notify via notificaiton receiver callback.",
88 | "line": 26
89 | },
90 | {
91 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.Android/EnrollmentNotificationReceiver.cs",
92 | "description": "All MAM notifications are received here. If enrollment is successful, release the flag. Then the App will continue.",
93 | "line": 31
94 | },
95 | {
96 | "file": "3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/MainPage.xaml.cs",
97 | "description": "App continues here after the registration with MAM and acquires the desired token.",
98 | "line": 56
99 | }
100 | ],
101 | "ref": "feature/IntuneSample"
102 | }
--------------------------------------------------------------------------------
/3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune/MainPage.xaml.cs:
--------------------------------------------------------------------------------
1 | // Copyright (c) Microsoft Corporation. All rights reserved.
2 | // Licensed under the MIT License.
3 |
4 | using System;
5 | using System.Diagnostics;
6 | using System.Threading.Tasks;
7 | using activedirectoryxamarinintune;
8 | using Microsoft.Identity.Client;
9 | using Xamarin.Forms;
10 |
11 | namespace active_directory_xamarin_intune
12 | {
13 | public partial class MainPage : ContentPage
14 | {
15 | ///
16 | /// The scopes that are protected by conditional access
17 | ///
18 | internal static string[] Scopes = { "https://.sharepoint.com/AllSites.Read" }; // TODO - change scopes per your enterprise app
19 |
20 | public MainPage()
21 | {
22 | InitializeComponent();
23 | }
24 |
25 | async void btnAcquireToken_Clicked(System.Object sender, System.EventArgs e)
26 | {
27 | AuthenticationResult result = null;
28 |
29 | try
30 | {
31 | // attempt silent login.
32 | // If this is very first time and the device is not enrolled, it will throw MsalUiRequiredException
33 | // If the device is enrolled, this will succeed.
34 | result = await PCAWrapper.Instance.AcquireTokenSilentAsync(Scopes).ConfigureAwait(false);
35 |
36 | await ShowMessage("First AcquireTokenTokenSilent call", result.AccessToken).ConfigureAwait(false);
37 | }
38 | catch (MsalUiRequiredException)
39 | {
40 | try
41 | {
42 | // This executes UI interaction ot obtain token
43 | result = await PCAWrapper.Instance.AcquireTokenInteractiveAsync(Scopes).ConfigureAwait(false);
44 |
45 | await ShowMessage("First AcquireTokenInteractive call", result.AccessToken).ConfigureAwait(false);
46 | }
47 | catch (IntuneAppProtectionPolicyRequiredException exProtection)
48 | {
49 | result = await HandleIntuneAppProtectionRequired(result, exProtection).ConfigureAwait(false);
50 | }
51 | catch (Exception ex)
52 | {
53 | await ShowMessage("Exception in AcquireTokenInteractiveAsync", ex.Message).ConfigureAwait(false);
54 | }
55 | }
56 | catch (IntuneAppProtectionPolicyRequiredException exProtection)
57 | {
58 | result = await HandleIntuneAppProtectionRequired(result, exProtection).ConfigureAwait(false);
59 | }
60 | catch (Exception ex)
61 | {
62 | await ShowMessage("Exception in AcquireTokenTokenSilent", ex.Message).ConfigureAwait(false);
63 | }
64 | }
65 |
66 | private async Task HandleIntuneAppProtectionRequired(AuthenticationResult result, IntuneAppProtectionPolicyRequiredException exProtection)
67 | {
68 | // if the scope requires App Protection Policy, IntuneAppProtectionPolicyRequiredException is thrown.
69 | // Perform registration operation here and then does the silent token acquisition
70 | var intuneConnector = DependencyService.Get(DependencyFetchTarget.GlobalInstance);
71 | await intuneConnector.DoMAMRegisterAsync(exProtection).ContinueWith(async (arg) =>
72 | {
73 | Debug.WriteLine("***HandleIntuneAppProtectionRequired Continued");
74 | // Now the device is registered, perform token acquisition
75 | try
76 | {
77 | // if no MFA Policy is present, the silent should work.
78 | result = await PCAWrapper.Instance.AcquireTokenSilentAsync(Scopes).ConfigureAwait(false);
79 |
80 | await ShowMessage("AcquireTokenTokenSilent call after Intune registration.", result.AccessToken).ConfigureAwait(false);
81 | }
82 | catch (MsalUiRequiredException)
83 | {
84 | // if MFA policy is present, one needs to AcquireTokenInteractive API
85 | result = await PCAWrapper.Instance.AcquireTokenInteractiveAsync(Scopes).ConfigureAwait(false);
86 |
87 | await ShowMessage("Second AcquireTokenInteractive call after Intune registration.", result.AccessToken).ConfigureAwait(false);
88 | }
89 | catch (Exception ex)
90 | {
91 | await ShowMessage("Exception in AcquireTokenSilentAsync after registration.", ex.Message).ConfigureAwait(false);
92 | }
93 | }).ConfigureAwait(false);
94 | return result;
95 | }
96 |
97 | // display the message
98 | private Task ShowMessage(string title, string message)
99 | {
100 | Dispatcher.BeginInvokeOnMainThread(async () =>
101 | {
102 | await DisplayAlert(title, message, "OK").ConfigureAwait(false);
103 | });
104 |
105 | return Task.CompletedTask;
106 | }
107 |
108 | // called when signout it pressed
109 | async void btnSignOut_Clicked(System.Object sender, System.EventArgs e)
110 | {
111 | var intuneConnector = DependencyService.Get(DependencyFetchTarget.GlobalInstance);
112 | intuneConnector.Unenroll();
113 |
114 | await PCAWrapper.Instance.SignOut().ConfigureAwait(false);
115 | }
116 | }
117 | }
118 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | ---
2 | page_type: sample
3 | languages:
4 | - csharp
5 | - powershell
6 | products:
7 | - azure-active-directory
8 | description: "You have a Xamarin mobile application and you want it to consume Microsoft Graph or your own Web Api using Microsoft Identity Platform to acquire tokens."
9 | urlFragment: active-directory-xamarin-native-v2
10 | ---
11 |
12 | # A Xamarin mobile application using Microsoft identity platform (formerly Azure AD v2.0)
13 |
14 | [](https://identitydivision.visualstudio.com/IDDP/_build/latest?definitionId=32)
15 |
16 | ## About this sample
17 |
18 | ### Scenario
19 |
20 | You have a mobile application and you want it to consume either Microsoft Graph or your own Web API using the **Microsoft Identity Platform** to acquire tokens.
21 |
22 | ### Structure of the repository
23 |
24 | This repository contains a two-part tutorial - a basic scenario and a more advanced with broker scenario. Choose the one that best suits your scenario, or go through both to understand the differences between the implementations.
25 |
26 | Sub folder | Description
27 | ----------------------------- | -----------
28 | [1-Basic](https://github.com/Azure-Samples/active-directory-xamarin-native-v2/tree/master/1-Basic) | This sample app shows how to use the Microsoft identity platform endpoint to sign-in a user interactively and display their profile 
29 | [2-With-broker](https://github.com/Azure-Samples/active-directory-xamarin-native-v2/tree/master/2-With-broker) | This chapter adds additional support for the broker (Microsoft Authenticator), which enables more complex scenarios, like device related conditional access and SSO. 
30 |
31 | ## How to run this sample For Xamarin Forms (not MAUI)
32 |
33 | To run this sample, you'll need:
34 |
35 | - [Visual Studio 2019](https://aka.ms/vsdownload). Install or update Visual Studio with the following workloads:
36 | - Universal Windows Platform Development
37 | - Mobile Development with .Net
38 |
39 | Then from the "Individual Components" tab, make sure these additional items are selected:
40 | - Android SDK setup (API level 27)
41 | - Windows 10 SDK (10.0.17134.0)
42 | - Android SDK level 27 (oreo) and 28 (pie), and Android SDK build tools 27.0.3 are also required. These are not installed through the VS Installer, so instead use the Android SDK Manager (Visual Studio > Tools > Android > Android SDK Manager…)
43 | - An Internet connection
44 | - A Windows, OS X, or Linux machine (necessary if you want to run the app on their respective platforms)
45 | - An Azure Active Directory (Azure AD) tenant. For more information on how to get an Azure AD tenant, see [How to get an Azure AD tenant](https://azure.microsoft.com/en-us/documentation/articles/active-directory-howto-tenant/)
46 | - A user account in your Azure AD tenant. This sample will not work with a Microsoft account (formerly Windows Live account). Therefore, if you signed in to the [Azure portal](https://portal.azure.com) with a Microsoft account and have never created a user account in your directory before, you need to do that now.
47 | - Setup [Xamarin.iOS for Visual Studio](https://docs.microsoft.com/en-us/xamarin/ios/get-started/installation/windows/introduction-to-xamarin-ios-for-visual-studio) (if you want to run the iOS app) - This will require Visual Studio on PC, and on a Mac Machine where XCode 14.0 is installed.
48 |
49 | ### Step 1: Clone or download this repository
50 |
51 | From your shell or command line:
52 |
53 | ```Shell
54 | git clone https://github.com/Azure-Samples/active-directory-xamarin-native-v2.git
55 | ```
56 |
57 | or download and exact the repository .zip file.
58 |
59 | > Given that the name of the sample is pretty long, and so are the name of the referenced NuGet packages, you might want to clone it in a folder close to the root of your hard drive, to avoid file size limitations on Windows.
60 |
61 | Then navigate to the sub-folder of your choice, [1-Basic](./1-Basic) or [2-With-broker](./2-With-broker)
62 |
63 | ## Community Help and Support
64 |
65 | Use [Stack Overflow](http://stackoverflow.com/questions/tagged/msal) to get support from the community.
66 | Ask your questions on Stack Overflow first and browse existing issues to see if someone has asked your question before.
67 | Make sure that your questions or comments are tagged with [`msal` `dotnet`].
68 |
69 | If you find a bug in the sample, please raise the issue on [GitHub Issues](../../issues).
70 |
71 | If you find a bug in msal.Net, please raise the issue on [MSAL.NET GitHub Issues](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues).
72 |
73 | To provide a recommendation, visit the following [User Voice page](https://feedback.azure.com/forums/169401-azure-active-directory).
74 |
75 | ## Contributing
76 |
77 | If you'd like to contribute to this sample, see [CONTRIBUTING.MD](/CONTRIBUTING.md).
78 |
79 | This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/). For more information, see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.
80 |
81 | ## More information
82 |
83 | For more information, see MSAL.NET's conceptual documentation:
84 |
85 | - [Mobile application scenario landing page](https://docs.microsoft.com/azure/active-directory/develop/scenario-mobile-overview)
86 | - [Quickstart: Register an application with the Microsoft identity platform](https://docs.microsoft.com/azure/active-directory/develop/quickstart-register-app)
87 | - [Quickstart: Configure a client application to access web APIs](https://docs.microsoft.com/azure/active-directory/develop/quickstart-configure-app-access-web-apis)
88 | - [Use Microsoft Authenticator or Microsoft Intune Company Portal on Xamarin applications](https://docs.microsoft.com/azure/active-directory/develop/msal-net-use-brokers-with-xamarin-apps)
89 |
--------------------------------------------------------------------------------
/1-Basic/UserDetailsClient/UserDetailsClient/MainPage.xaml.cs:
--------------------------------------------------------------------------------
1 | using Microsoft.Identity.Client;
2 | using Newtonsoft.Json.Linq;
3 | using System;
4 | using System.Collections.Generic;
5 | using System.Linq;
6 | using System.Net.Http;
7 | using System.Threading.Tasks;
8 |
9 | using Xamarin.Forms;
10 |
11 | namespace UserDetailsClient
12 | {
13 | public partial class MainPage : ContentPage
14 | {
15 | public MainPage()
16 | {
17 | InitializeComponent();
18 | }
19 |
20 | async void OnSignInSignOut(object sender, EventArgs e)
21 | {
22 | AuthenticationResult authResult = null;
23 | IEnumerable accounts = await App.PCA.GetAccountsAsync().ConfigureAwait(false);
24 | try
25 | {
26 | if (btnSignInSignOut.Text == "Sign in")
27 | {
28 | try
29 | {
30 | IAccount firstAccount = accounts.FirstOrDefault();
31 | authResult = await App.PCA.AcquireTokenSilent(App.Scopes, firstAccount)
32 | .ExecuteAsync()
33 | .ConfigureAwait(false);
34 | }
35 | catch (MsalUiRequiredException)
36 | {
37 | try
38 | {
39 | var builder = App.PCA.AcquireTokenInteractive(App.Scopes)
40 | .WithParentActivityOrWindow(App.ParentWindow);
41 |
42 | if (Device.RuntimePlatform != "UWP")
43 | {
44 | // on Android and iOS, prefer to use the system browser, which does not exist on UWP
45 | SystemWebViewOptions systemWebViewOptions = new SystemWebViewOptions()
46 | {
47 | iOSHidePrivacyPrompt = true,
48 | };
49 |
50 | builder.WithSystemWebViewOptions(systemWebViewOptions);
51 | builder.WithUseEmbeddedWebView(false);
52 | }
53 |
54 | authResult = await builder.ExecuteAsync().ConfigureAwait(false);
55 | }
56 | catch (Exception ex2)
57 | {
58 | Device.BeginInvokeOnMainThread(async () =>
59 | {
60 | await DisplayAlert("Acquire token interactive failed. See exception message for details: ", ex2.Message, "Dismiss");
61 | });
62 | }
63 | }
64 |
65 | if (authResult != null)
66 | {
67 | var content = await GetHttpContentWithTokenAsync(authResult.AccessToken);
68 | UpdateUserContent(content);
69 | }
70 | }
71 | else
72 | {
73 | while (accounts.Any())
74 | {
75 | await App.PCA.RemoveAsync(accounts.FirstOrDefault()).ConfigureAwait(false);
76 | accounts = await App.PCA.GetAccountsAsync().ConfigureAwait(false);
77 | }
78 |
79 |
80 | Device.BeginInvokeOnMainThread(() =>
81 | {
82 | slUser.IsVisible = false;
83 | btnSignInSignOut.Text = "Sign in";
84 | });
85 | }
86 | }
87 | catch (Exception ex)
88 | {
89 | Device.BeginInvokeOnMainThread(async () =>
90 | {
91 | await DisplayAlert("Authentication failed. See exception message for details: ", ex.Message, "Dismiss");
92 | });
93 | }
94 | }
95 |
96 | private void UpdateUserContent(string content)
97 | {
98 | if(!string.IsNullOrEmpty(content))
99 | {
100 | JObject user = JObject.Parse(content);
101 |
102 | Device.BeginInvokeOnMainThread(() =>
103 | {
104 | slUser.IsVisible = true;
105 |
106 | lblDisplayName.Text = user["displayName"].ToString();
107 | lblGivenName.Text = user["givenName"].ToString();
108 | lblId.Text = user["id"].ToString();
109 | lblSurname.Text = user["surname"].ToString();
110 | lblUserPrincipalName.Text = user["userPrincipalName"].ToString();
111 |
112 | btnSignInSignOut.Text = "Sign out";
113 | });
114 | }
115 | }
116 |
117 | public async Task GetHttpContentWithTokenAsync(string token)
118 | {
119 | try
120 | {
121 | //get data from API
122 | HttpClient client = new HttpClient();
123 | HttpRequestMessage message = new HttpRequestMessage(HttpMethod.Get, "https://graph.microsoft.com/v1.0/me");
124 | message.Headers.Authorization = new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", token);
125 | HttpResponseMessage response = await client.SendAsync(message).ConfigureAwait(false);
126 | string responseString = await response.Content.ReadAsStringAsync().ConfigureAwait(false);
127 | return responseString;
128 | }
129 | catch(Exception ex)
130 | {
131 | Device.BeginInvokeOnMainThread(async () =>
132 | {
133 | await DisplayAlert("API call to graph failed: ", ex.Message, "Dismiss").ConfigureAwait(false);
134 | });
135 | return ex.ToString();
136 | }
137 | }
138 | }
139 | }
140 |
--------------------------------------------------------------------------------
/3-With-Intune MAM/IntuneClient/active-directory-xamarin-intune.iOS/active-directory-xamarin-intune.iOS.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | Debug
5 | iPhoneSimulator
6 | 8.0.30703
7 | 2.0
8 | {EB20B633-5FEA-4AB6-B07D-3CF7E6AA9CF3}
9 | {FEACFBD2-3405-455C-9665-78FE426C6842};{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}
10 | {6143fdea-f3c2-4a09-aafa-6e230626515e}
11 | Exe
12 | active_directory_xamarin_intune.iOS
13 | Resources
14 | active_directory_xamarin_intune.iOS
15 | true
16 | NSUrlSessionHandler
17 | automatic
18 |
19 |
20 | true
21 | portable
22 | false
23 | bin\iPhoneSimulator\Debug
24 | DEBUG
25 | prompt
26 | 4
27 | x86_64
28 | None
29 | true
30 |
31 |
32 | none
33 | true
34 | bin\iPhoneSimulator\Release
35 | prompt
36 | 4
37 | None
38 | x86_64
39 |
40 |
41 | true
42 | portable
43 | false
44 | bin\iPhone\Debug
45 | DEBUG
46 | prompt
47 | 4
48 | ARM64
49 | iPhone Developer
50 | true
51 | Entitlements.plist
52 | None
53 | -all
54 | true
55 | true
56 |
57 |
58 | none
59 | true
60 | bin\iPhone\Release
61 | prompt
62 | 4
63 | ARM64
64 | iPhone Developer
65 | Entitlements.plist
66 | SdkOnly
67 |
68 |
69 |
70 |
71 |
72 |
73 |
74 |
75 |
76 |
77 |
78 |
79 |
80 |
81 | false
82 |
83 |
84 | false
85 |
86 |
87 | false
88 |
89 |
90 | false
91 |
92 |
93 | false
94 |
95 |
96 | false
97 |
98 |
99 | false
100 |
101 |
102 | false
103 |
104 |
105 | false
106 |
107 |
108 | false
109 |
110 |
111 | false
112 |
113 |
114 | false
115 |
116 |
117 | false
118 |
119 |
120 | false
121 |
122 |
123 |
124 |
125 |
126 |
127 |
128 |
129 |
130 |
131 |
132 |
133 | 4.47.0
134 |
135 |
136 |
137 |
138 | 16.0.1.2
139 |
140 |
141 |
142 |
143 |
144 | {C44C647D-BC45-4B6B-93C7-3222E3DBD633}
145 | active-directory-xamarin-intune
146 |
147 |
148 |
--------------------------------------------------------------------------------