Azure AD SecurityGroup Setup

asppsettings.json

{
  "AzureAd": {
    "Instance": "https://login.microsoftonline.com/",
    "Domain": "Directory.onmicrosoft.com",
    "TenantId": "Dictory ID",
    "ClientId": "Application ID",
    "CallbackPath": "/signin-oidc"
  },
  //
}

controller.cs

[Authorize(Policy = "Admins")]
public IActionResult About()
{
    ViewData["Message"] = "Your application description page.";

    return View();
}

[Authorize(Policy = "PolicyTest")]
public IActionResult Contact()
{
    ViewData["Message"] = "Your contact page.";

    return View();
}

registeredApp.json

// Manifest File
{
//
"groupMembershipClaims": "SecurityGroup",
//
}

startup.cs

services.AddAuthentication(sharedOptions =>
    {
        sharedOptions.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
        sharedOptions.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
    })
    .AddAzureAd(options => Configuration.Bind("AzureAd", options))
    .AddCookie();

    services.AddAuthorization(options =>
    {
        options.AddPolicy("Admins", policyBuilder => policyBuilder.RequireClaim("groups", "ObjectID"));
        options.AddPolicy("PolicyTest", policyBuilder => policyBuilder.RequireClaim("groups", "ObjectID"));
    });
    
    
    
    
app.UseAuthentication();