BronxCare - Admin Login

Azure AD / Microsoft Login Guide

1. How to Register App in Azure Active Directory:

2. Enable Direct Login Form (ROPC):

To allow the email/password form to validate against Azure AD:

3. Configure appsettings.json:

Paste the Client ID and Tenant ID into appsettings.json:

"AzureAd": {
  "TenantId": "your-tenant-id",
  "ClientId": "your-client-id",
  "Domain": "bronxcare.org"
}

4. Common Errors & Fixes:

AADSTS50011 (Redirect URI Mismatch): Verify the port in the browser and ensure it matches the SPA redirect URI in Azure portal.
AADSTS7000218 (ROPC Flow Blocked): Ensure "Allow public client flows" is set to Yes in the Azure app settings.
AADSTS50076 (MFA Challenge): Azure AD requires Multi-Factor Authentication. Direct email/password login is blocked. Use the Sign in with Microsoft button.