Search code examples
securitydebuggingauthenticationazureadal

How to debug/trace ADAL authentication?

I was trying one of the Azure Active Directory samples Microsoft has published here: https://github.com/AzureADSamples/WebApp-WebAPI-OpenIDConnect-DotNet

I managed to screw up the audience value in the web.config for the TodoListService and got a 401 Unauthorized response when calling the service.

The problem is, it took me way too long to figure out what was wrong. Running it in the debugger did not produce any helpful trace statements in the output window. There were also no events in the event viewer.

Is there any configuration I can turn on which would have helped my find this more quickly? Is there middleware with logging or diagnostic capabilities that I could use to debug this?

I suppose I could have grabbed the sources from GitHub and tried to debug the issue, but that is hardly convenient. Is there anything I'm missing?

Solution

  • You can enable logger using

    Trace.Listeners.Add(new ConsoleTraceListener()); AdalTrace.LegacyTraceSwitch.Level = TraceLevel.Verbose;

    Fulll details here https://github.com/AzureAD/azure-activedirectory-library-for-dotnet#logs