Azure Active Directory Authentication Library (ADAL) for Android

To integrate the Microsoft Azure Active Directory Authentication Library (ADAL) into your Android project, follow these high-level steps:

1. Add Library Reference: Add the ADAL library as an Android library dependency in your project.
2. Configure Manifest: Add required permissions (INTERNET, ACCESS_NETWORK_STATE) and register the com.microsoft.aad.adal.AuthenticationActivity in your AndroidManifest.xml.
3. Azure AD Registration:
   • Register your Web API service in Azure AD and note the APP ID URI.
   • Register your native client app in Azure AD, granting it permission to the Web API, and note the clientId and redirectUri.
4. Initialize AuthenticationContext: Create an instance of AuthenticationContext in your main Activity.
5. Handle Activity Results: Override onActivityResult in your Activity to pass results back to the AuthenticationContext.
6. Acquire Tokens: Use acquireToken with an AuthenticationCallback to perform interactive logins.

<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
<application ...>
    <activity
        android:name="com.microsoft.aad.adal.AuthenticationActivity" >
    </activity>
</application>

Broker authentication allows using Microsoft Intune's Company Portal or the Azure Authenticator App.

Requirements:

1. Enable Broker: Explicitly enable it using AuthenticationSettings.INSTANCE.setUseBroker(true);.
2. Redirect URI: Register a special redirect URI in the format msauth://packagename/Base64UrlencodedSignature. You can retrieve this via mContext.getBrokerRedirectUri.
3. Permissions:
   • Target SDK < 23: Requires GET_ACCOUNTS, USE_CREDENTIALS, and MANAGE_ACCOUNTS in the manifest.
   • Target SDK >= 23: USE_CREDENTIALS and MANAGE_ACCOUNTS are deprecated. GET_ACCOUNTS is a 'dangerous' permission and must be requested at runtime.
4. Error Handling: If you receive DEVELOPER_BROKER_PERMISSIONS_MISSING, ensure you are using the latest version of ADAL and the broker app.

Get Broker User: You can check if a valid broker account exists using mContext.getBrokerUser().

// Enable broker usage
AuthenticationSettings.INSTANCE.setUseBroker(true);

// Get the current broker user
String brokerAccount = mContext.getBrokerUser();

To include the ADAL AAR package in your Android Studio project, add mavenCentral() to your repositories and include the dependency in your build.gradle file.

Note: If your app already includes libraries like Gson or the Surface Duo SDK, you may need to exclude them from the ADAL compile task to avoid conflicts.

repositories {
    mavenCentral()
    maven {
        // Surface Duo SDK dependency.
        url 'https://pkgs.dev.azure.com/MicrosoftDeviceSDK/DuoSDK-Public/_packaging/Duo-SDK-Feed%40Local/maven/v1'
    }
}
dependencies {
    // your dependencies here...
    compile('com.microsoft.aad:adal:3.0.1') {
        // if your app includes android support
        // libraries, Gson or Surface Duo SDK 
        // in its dependencies, exclude that
        // groupId from ADAL's compile task by 
        // un-commenting the appropriate line below

        // exclude group: 'com.android.support'
        // exclude group: 'com.google.code.gson'
        // exclude group: 'com.microsoft.device.display'
    }
}