initial PR with API updates for 0.2.0-preview

jennyf19 · jennyf19 · commit 916e541b2ef4 · 2020-06-23T21:06:59.000-07:00
diff --git a/1-WebApp-OIDC/1-1-MyOrg/README.md b/1-WebApp-OIDC/1-1-MyOrg/README.md
@@ -163,7 +163,7 @@ cd "1-WebApp-OIDC\1-1-MyOrg"
      by this line:
 
      ```CSharp
-      services.AddSignIn(Configuration);
+      services.AddMicrosoftWebApp(Configuration);
      ```
 
      This enables your application to use the Microsoft identity platform endpoint. This endpoint is capable of signing-in users both with their Work and School and Microsoft Personal accounts.
diff --git a/1-WebApp-OIDC/1-1-MyOrg/Startup.cs b/1-WebApp-OIDC/1-1-MyOrg/Startup.cs
@@ -34,7 +34,7 @@ public void ConfigureServices(IServiceCollection services)
             });
 
             // Sign-in users with the Microsoft identity platform
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             services.AddControllersWithViews(options =>
             {
diff --git a/1-WebApp-OIDC/1-2-AnyOrg/README-1-1-to-1-2.md b/1-WebApp-OIDC/1-2-AnyOrg/README-1-1-to-1-2.md
@@ -57,14 +57,14 @@ The actual sign-in audience (accounts to sign-in) is the lowest set of what is s
 
 In order to restrict users from specific organizations from signing-in to your web app, you'll need to customize your code a bit more to restrict issuers. In Azure AD, the token issuers are the Azure AD tenants which issue tokens to applications.
 
-In the `Startup.cs` file, in the `ConfigureServices` method, after `services.AddSignIn(Configuration)` add some code to validate specific issuers by overriding the `TokenValidationParameters.IssuerValidator` delegate.
+In the `Startup.cs` file, in the `ConfigureServices` method, after `services.AddMicrosoftWebApp(Configuration)` add some code to validate specific issuers by overriding the `TokenValidationParameters.IssuerValidator` delegate.
 
 ```CSharp
     public void ConfigureServices(IServiceCollection services)
     {
     ...
     // Sign-in users with the Microsoft identity platform
-    services.AddSignIn(Configuration, options =>
+    services.AddMicrosoftWebApp(Configuration, options =>
     {
         Configuration.Bind("AzureAd", options);
         // Restrict users to specific belonging to specific tenants
diff --git a/1-WebApp-OIDC/1-2-AnyOrg/README.md b/1-WebApp-OIDC/1-2-AnyOrg/README.md
@@ -155,7 +155,7 @@ cd "1-WebApp-OIDC\1-2-AnyOrg"
      by this line:
 
      ```CSharp
-      services.AddSignIn(Configuration);
+      services.AddMicrosoftWebApp(Configuration);
      ```
 
      This enables your application to use the Microsoft identity platform endpoint. This endpoint is capable of signing-in users both with their Work and School and Microsoft Personal accounts.
@@ -228,7 +228,7 @@ In the `Startup.cs` file, in the `ConfigureServices` method, after `services.Add
     {
     ...
     // Sign-in users with the Microsoft identity platform
-    services.AddSignIn(Configuration);
+    services.AddMicrosoftWebApp(Configuration);
 
     // Restrict users to specific belonging to specific tenants
     services.Configure<OpenIdConnectOptions>(OpenIdConnectDefaults.AuthenticationScheme, options =>
diff --git a/1-WebApp-OIDC/1-2-AnyOrg/Startup.cs b/1-WebApp-OIDC/1-2-AnyOrg/Startup.cs
@@ -34,7 +34,7 @@ public void ConfigureServices(IServiceCollection services)
             });
 
             // Sign-in users with the Microsoft identity platform
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             services.AddControllersWithViews(options =>
             {
diff --git a/1-WebApp-OIDC/1-3-AnyOrgOrPersonal/README.md b/1-WebApp-OIDC/1-3-AnyOrgOrPersonal/README.md
@@ -150,7 +150,7 @@ In the **appsettings.json** file:
      by this line:
 
      ```CSharp
-      services.AddSignIn(Configuration);
+      services.AddMicrosoftWebApp(Configuration);
      ```
 
      This enables your application to use the Microsoft identity platform endpoint. This endpoint is capable of signing-in users both with their Work and School and Microsoft Personal accounts.
diff --git a/1-WebApp-OIDC/1-3-AnyOrgOrPersonal/Startup.cs b/1-WebApp-OIDC/1-3-AnyOrgOrPersonal/Startup.cs
@@ -34,7 +34,7 @@ public void ConfigureServices(IServiceCollection services)
             });
 
             // Sign-in users with the Microsoft identity platform
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             services.AddControllersWithViews(options =>
             {
diff --git a/1-WebApp-OIDC/1-4-Sovereign/README.md b/1-WebApp-OIDC/1-4-Sovereign/README.md
@@ -121,7 +121,7 @@ cd "1-WebApp-OIDC\1-4-Sovereign"
      by this line:
 
      ```CSharp
-      services.AddSignIn(Configuration);
+      services.AddMicrosoftWebApp(Configuration);
      ```
 
      This enables your application to use the Microsoft identity platform endpoint. This endpoint is capable of signing-in users both with their Work and School and Microsoft Personal accounts.
diff --git a/1-WebApp-OIDC/1-4-Sovereign/Startup.cs b/1-WebApp-OIDC/1-4-Sovereign/Startup.cs
@@ -34,7 +34,7 @@ public void ConfigureServices(IServiceCollection services)
             });
 
             // Sign-in users with the Microsoft identity platform
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             services.AddControllersWithViews(options =>
             {
diff --git a/1-WebApp-OIDC/1-5-B2C/README.md b/1-WebApp-OIDC/1-5-B2C/README.md
@@ -125,12 +125,12 @@ You can trigger the middleware to send an OpenID Connect sign-in request by deco
 Here is the middleware example:
 
 ```csharp
-      services.AddSignIn(Configuration, "AzureAdB2C");
+      services.AddMicrosoftWebApp(Configuration, "AzureAdB2C");
 ```
 
 Important things to notice:
 
-- The method `AddSignIn` will configure the authentication based on the `MicrosoftIdentityOptions.cs` options. Feel free to bind more properties on `AzureAdB2C` section on `appsettings.json` if you need to set more options.
+- The method `AddMicrosoftWebApp` will configure the authentication based on the `MicrosoftIdentityOptions.cs` options. Feel free to bind more properties on `AzureAdB2C` section on `appsettings.json` if you need to set more options.
 - The urls you set for `CallbackPath` and `SignedOutCallbackPath` should be registered on the **Reply Urls** of your application, in [Azure Portal](https://portal.azure.com).
 
 ## Next steps
diff --git a/1-WebApp-OIDC/1-5-B2C/Startup.cs b/1-WebApp-OIDC/1-5-B2C/Startup.cs
@@ -35,7 +35,7 @@ public void ConfigureServices(IServiceCollection services)
             });
 
             // Configuration to sign-in users with Azure AD B2C
-            services.AddSignIn(Configuration, "AzureAdB2C");
+            services.AddMicrosoftWebApp(Configuration, "AzureAdB2C");
 
             services.AddControllersWithViews()
                 .AddMicrosoftIdentityUI();
diff --git a/1-WebApp-OIDC/1-6-SignOut/README.md b/1-WebApp-OIDC/1-6-SignOut/README.md
@@ -66,7 +66,7 @@ services.Configure<OpenIdConnectOptions>(OpenIdConnectDefaults.AuthenticationSch
 
 ### Clearing the token cache
 
-Your application can also intercept the logout event, for instance to clear the entry of the token cache associated with the account that signed out. We'll see in the second part of this tutorial (about the Web app calling a Web API), that the web app will store access tokens for the user in a cache. Intercepting the logout callback enables your web application to remove the user from the token cache. This is illustrated in the `AddWebAppCallsProtectedWebApi()` method of [WebAppServiceCollectionExtensions.cs](https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identity.Web/WebAppServiceCollectionExtensions.cs#L202-L208)
+Your application can also intercept the logout event, for instance to clear the entry of the token cache associated with the account that signed out. We'll see in the second part of this tutorial (about the Web app calling a Web API), that the web app will store access tokens for the user in a cache. Intercepting the logout callback enables your web application to remove the user from the token cache. This is illustrated in the `AddMicrosoftWebAppCallsWebApi()` method of [WebAppServiceCollectionExtensions.cs](https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identity.Web/WebAppServiceCollectionExtensions.cs#L202-L208)
 
 ### Single Sign-Out
 
diff --git a/2-WebApp-graph-user/2-1-Call-MSGraph/README.md b/2-WebApp-graph-user/2-1-Call-MSGraph/README.md
@@ -100,10 +100,10 @@ After the following lines in the ConfigureServices(IServiceCollection services)
  public void ConfigureServices(IServiceCollection services)
 {
     . . .
-    services.AddSignIn(Configuration);
+    services.AddMicrosoftWebApp(Configuration);
     // Token acquisition service based on MSAL.NET 
     // and chosen token cache implementation
-    services.AddWebAppCallsProtectedWebApi(Configuration, new string[] { Constants.ScopeUserRead })
+    services.AddMicrosoftWebAppCallsWebApi(Configuration, new string[] { Constants.ScopeUserRead })
         .AddInMemoryTokenCache();
 ```
 
diff --git a/2-WebApp-graph-user/2-1-Call-MSGraph/Startup.cs b/2-WebApp-graph-user/2-1-Call-MSGraph/Startup.cs
@@ -40,11 +40,11 @@ public void ConfigureServices(IServiceCollection services)
 
             services.AddOptions();
             
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             // Token acquisition service based on MSAL.NET
             // and chosen token cache implementation
-            services.AddWebAppCallsProtectedWebApi(Configuration, new string[] { Constants.ScopeUserRead })
+            services.AddMicrosoftWebAppCallsWebApi(Configuration, new string[] { Constants.ScopeUserRead })
                .AddInMemoryTokenCaches();
 
             /*
diff --git a/2-WebApp-graph-user/2-2-TokenCache/README-incremental-instructions.md b/2-WebApp-graph-user/2-2-TokenCache/README-incremental-instructions.md
@@ -97,7 +97,7 @@ public void ConfigureServices(IServiceCollection services)
     // Token acquisition service based on MSAL.NET 
     // and the Sql server based token cache implementation
     services.AddMicrosoftIdentityPlatformAuthentication(Configuration)
-            .AddWebAppCallsProtectedWebApi(new string[] { Constants.ScopeUserRead })
+            .AddMicrosoftWebAppCallsWebApi(new string[] { Constants.ScopeUserRead })
             .AddSqlAppTokenCache(Configuration)
             .AddSqlPerUserTokenCache(Configuration);
 ```
diff --git a/2-WebApp-graph-user/2-2-TokenCache/README.md b/2-WebApp-graph-user/2-2-TokenCache/README.md
@@ -187,8 +187,8 @@ public void ConfigureServices(IServiceCollection services)
     . . .
     // Token acquisition service based on MSAL.NET 
     // and the Sql server based token cache implementation
-    services.AddSignIn(Configuration)
-                    .AddWebAppCallsProtectedWebApi(Configuration, new string[] { Constants.ScopeUserRead })
+    services.AddMicrosoftWebApp(Configuration)
+                    .AddMicrosoftWebAppCallsWebApi(Configuration, new string[] { Constants.ScopeUserRead })
                     .AddDistributedTokenCaches();
 
     services.AddDistributedSqlServerCache(options =>
diff --git a/2-WebApp-graph-user/2-2-TokenCache/Startup.cs b/2-WebApp-graph-user/2-2-TokenCache/Startup.cs
@@ -51,11 +51,11 @@ dotnet tool install --global dotnet-sql-cache
                 dotnet sql-cache create "Data Source=(localdb)\MSSQLLocalDB;Initial Catalog=MsalTokenCacheDatabase;Integrated Security=True;" dbo TokenCache    
              */
 
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             // Token acquisition service based on MSAL.NET
             // and chosen token cache implementation
-            services.AddWebAppCallsProtectedWebApi(Configuration, new string[] { Constants.ScopeUserRead })
+            services.AddMicrosoftWebAppCallsWebApi(Configuration, new string[] { Constants.ScopeUserRead })
                 .AddDistributedTokenCaches();
 
             services.AddDistributedSqlServerCache(options =>
diff --git a/2-WebApp-graph-user/2-3-Multi-Tenant/README-National-Cloud.md b/2-WebApp-graph-user/2-3-Multi-Tenant/README-National-Cloud.md
@@ -273,7 +273,7 @@ The `https://graph.microsoft.com/.default` is a static scope that allows the ten
 
 ### Custom token validation allowing only registered tenants
 
-On the `Startup.cs` we are calling `AddSignIn` to configure the authentication, and within that method, we validates that the token issuer is from AAD.
+On the `Startup.cs` we are calling `AddMicrosoftWebApp` to configure the authentication, and within that method, we validates that the token issuer is from AAD.
 
 ```csharp
 options.TokenValidationParameters.IssuerValidator = AadIssuerValidator.GetIssuerValidator(options.Authority).Validate;
diff --git a/2-WebApp-graph-user/2-3-Multi-Tenant/README.md b/2-WebApp-graph-user/2-3-Multi-Tenant/README.md
@@ -212,7 +212,7 @@ These steps are encapsulated in the [Microsoft.Identity.Web](..\..\Microsoft.Ide
 In order to be able to sign-in users from multiple tenants, the [/common endpoint](https://docs.microsoft.com/azure/active-directory/develop/howto-convert-app-to-be-multi-tenant#update-your-code-to-send-requests-to-common) must be used. In the sample, this endpoint is used as a result of setting the value for `TenantId` as `organizations` on the `appsettings.json` file, and configuring the middleware to read the values from it.
 
 ```csharp
-services.AddSignIn(Configuration);
+services.AddMicrosoftWebApp(Configuration);
 ```
 
  You can read about the various endpoints of the Microsoft Identity Platform [here](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols#endpoints).
@@ -248,7 +248,7 @@ The `https://graph.microsoft.com/.default` is a static scope that allows the ten
 
 ### Custom token validation allowing only registered tenants
 
-On the `Startup.cs` we are calling `AddSignIn` to configure the authentication, and within that method, we validates that the token issuer is from AAD.
+On the `Startup.cs` we are calling `AddMicrosoftWebApp` to configure the authentication, and within that method, we validates that the token issuer is from AAD.
 
 ```csharp
 options.TokenValidationParameters.IssuerValidator = AadIssuerValidator.GetIssuerValidator(options.Authority).Validate;
diff --git a/2-WebApp-graph-user/2-3-Multi-Tenant/Startup.cs b/2-WebApp-graph-user/2-3-Multi-Tenant/Startup.cs
@@ -56,7 +56,7 @@ public void ConfigureServices(IServiceCollection services)
             services.AddScoped<IMSGraphService, MSGraphService>();
 
             // Sign-in users with the Microsoft identity platform
-            services.AddSignIn(options =>
+            services.AddMicrosoftWebApp(options =>
                 {
                     Configuration.Bind("AzureAd", options);
                     options.Events.OnTokenValidated = async context =>
@@ -88,7 +88,7 @@ public void ConfigureServices(IServiceCollection services)
                     Configuration.Bind("AzureAD", options);
                 });
 
-            services.AddWebAppCallsProtectedWebApi(Configuration, new string[] { GraphScope.UserReadAll })
+            services.AddMicrosoftWebAppCallsWebApi(Configuration, new string[] { GraphScope.UserReadAll })
                 .AddInMemoryTokenCaches();
 
             services.AddControllersWithViews(options =>
diff --git a/2-WebApp-graph-user/2-4-Sovereign-Call-MSGraph/README.md b/2-WebApp-graph-user/2-4-Sovereign-Call-MSGraph/README.md
@@ -93,8 +93,8 @@ After the following lines in the ConfigureServices(IServiceCollection services)
     . . .
     // Token acquisition service based on MSAL.NET 
     // and chosen token cache implementation
-    services.AddSignIn(Configuration)
-            .AddWebAppCallsProtectedWebApi(new string[] { Constants.ScopeUserRead })
+    services.AddMicrosoftWebApp(Configuration)
+            .AddMicrosoftWebAppCallsWebApi(new string[] { Constants.ScopeUserRead })
             .AddInMemoryTokenCache();
 ```
 
diff --git a/2-WebApp-graph-user/2-4-Sovereign-Call-MSGraph/Startup.cs b/2-WebApp-graph-user/2-4-Sovereign-Call-MSGraph/Startup.cs
@@ -41,11 +41,11 @@ public void ConfigureServices(IServiceCollection services)
 
             services.AddOptions();
 
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             // Token acquisition service based on MSAL.NET
             // and chosen token cache implementation
-            services.AddWebAppCallsProtectedWebApi(Configuration, new string[] { Constants.ScopeUserRead })
+            services.AddMicrosoftWebAppCallsWebApi(Configuration, new string[] { Constants.ScopeUserRead })
                 .AddInMemoryTokenCaches();
 
             // Add Graph
diff --git a/3-WebApp-multi-APIs/README.md b/3-WebApp-multi-APIs/README.md
@@ -76,16 +76,16 @@ Starting from the [previous phase of the tutorial](../../2-WebApp-graph-user/2-1
 
 ### Update the `Startup.cs` file to enable TokenAcquisition by a MSAL.NET based service
 
-After the following lines in the ConfigureServices(IServiceCollection services) method, after `services.AddSignIn(Configuration);`, add `services.AddHttpClient<IArmOperations, ArmApiOperationService>();`:
+After the following lines in the ConfigureServices(IServiceCollection services) method, after `services.AddMicrosoftWebApp(Configuration);`, add `services.AddHttpClient<IArmOperations, ArmApiOperationService>();`:
 
 ```CSharp
  public void ConfigureServices(IServiceCollection services)
 {
     . . .
     // Token acquisition service based on MSAL.NET 
     // and chosen token cache implementation
-    services.AddSignIn(Configuration)
-            .AddWebAppCallsProtectedWebApi(new string[] { Constants.ScopeUserRead })
+    services.AddMicrosoftWebApp(Configuration)
+            .AddMicrosoftWebAppCallsWebApi(new string[] { Constants.ScopeUserRead })
             .AddInMemoryTokenCache();
     services.AddHttpClient<IArmOperations, ArmApiOperationService>();
 ```
diff --git a/3-WebApp-multi-APIs/Startup.cs b/3-WebApp-multi-APIs/Startup.cs
@@ -42,11 +42,11 @@ public void ConfigureServices(IServiceCollection services)
 
             services.AddOptions();
 
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             // Token acquisition service based on MSAL.NET
             // and chosen token cache implementation
-            services.AddWebAppCallsProtectedWebApi(Configuration, new string[] { Constants.ScopeUserRead })
+            services.AddMicrosoftWebAppCallsWebApi(Configuration, new string[] { Constants.ScopeUserRead })
                 .AddInMemoryTokenCaches();
 
             // Add APIs
diff --git a/4-WebApp-your-API/4-1-MyOrg/Client/Startup.cs b/4-WebApp-your-API/4-1-MyOrg/Client/Startup.cs
@@ -43,7 +43,7 @@ public void ConfigureServices(IServiceCollection services)
 
             services.AddOptions();
 
-            services.AddSignIn(Configuration);
+            services.AddMicrosoftWebApp(Configuration);
 
             // This is required to be instantiated before the OpenIdConnectOptions starts getting configured.
             // By default, the claims mapping will map claim names in the old format to accommodate older SAML applications.
@@ -53,7 +53,7 @@ public void ConfigureServices(IServiceCollection services)
 
             // Token acquisition service based on MSAL.NET
             // and chosen token cache implementation
-            services.AddWebAppCallsProtectedWebApi(Configuration, new string[] { Configuration["TodoList:TodoListScope"] })
+            services.AddMicrosoftWebAppCallsWebApi(Configuration, new string[] { Configuration["TodoList:TodoListScope"] })
                     .AddInMemoryTokenCaches();
 
             // Add APIs
diff --git a/4-WebApp-your-API/4-1-MyOrg/README-incremental-instructions.md b/4-WebApp-your-API/4-1-MyOrg/README-incremental-instructions.md
@@ -208,8 +208,8 @@ Add a reference to the `Microsoft.Identity.Web` library if not already present.
 1. Update the `configureServices` method in `startup.cs` to add the MSAL library and a token cache.
 
 ```CSharp
-    services.AddSignIn(Configuration)
-            .AddWebAppCallsProtectedWebApi(new string[] { Configuration["TodoList:TodoListScope"] })
+    services.AddMicrosoftWebApp(Configuration)
+            .AddMicrosoftWebAppCallsWebApi(new string[] { Configuration["TodoList:TodoListScope"] })
             .AddInMemoryTokenCaches();
  ```
 
@@ -250,7 +250,7 @@ using Microsoft.Identity.Web.Client.TokenCacheProviders;
   with
 
   ```Csharp
-    services.AddProtectedWebApi(Configuration)
+    services.AddMicrosoftWebApi(Configuration)
          .AddInMemoryTokenCaches();
   ```
   
@@ -260,7 +260,7 @@ using Microsoft.Identity.Web.Client.TokenCacheProviders;
      app.UseAuthentication();
      app.UseMvc();
   ```
-  `AddProtectedWebApi` does the following:
+  `AddMicrosoftWebApi` does the following:
   - add the **Jwt**BearerAuthenticationScheme (Note the replacement of **BearerAuthenticationScheme** by **Jwt**BearerAuthenticationScheme)
   - set the authority to be the Microsoft identity platform 
   - sets the audiences to validate
diff --git a/4-WebApp-your-API/4-1-MyOrg/README.md b/4-WebApp-your-API/4-1-MyOrg/README.md
diff --git a/4-WebApp-your-API/4-1-MyOrg/TodoListService/Startup.cs b/4-WebApp-your-API/4-1-MyOrg/TodoListService/Startup.cs
diff --git a/4-WebApp-your-API/4-2-B2C/Client/Startup.cs b/4-WebApp-your-API/4-2-B2C/Client/Startup.cs
diff --git a/4-WebApp-your-API/4-2-B2C/README-incremental-instructions.md b/4-WebApp-your-API/4-2-B2C/README-incremental-instructions.md
diff --git a/4-WebApp-your-API/4-2-B2C/README.md b/4-WebApp-your-API/4-2-B2C/README.md
diff --git a/4-WebApp-your-API/4-2-B2C/TodoListService/Startup.cs b/4-WebApp-your-API/4-2-B2C/TodoListService/Startup.cs
diff --git a/5-WebApp-AuthZ/5-1-Roles/README-incremental-instructions.md b/5-WebApp-AuthZ/5-1-Roles/README-incremental-instructions.md
diff --git a/5-WebApp-AuthZ/5-1-Roles/README.md b/5-WebApp-AuthZ/5-1-Roles/README.md
diff --git a/5-WebApp-AuthZ/5-1-Roles/Startup.cs b/5-WebApp-AuthZ/5-1-Roles/Startup.cs
diff --git a/5-WebApp-AuthZ/5-2-Groups/README-incremental-instructions.md b/5-WebApp-AuthZ/5-2-Groups/README-incremental-instructions.md
diff --git a/5-WebApp-AuthZ/5-2-Groups/README.md b/5-WebApp-AuthZ/5-2-Groups/README.md
diff --git a/5-WebApp-AuthZ/5-2-Groups/Startup.cs b/5-WebApp-AuthZ/5-2-Groups/Startup.cs

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,7 @@ public void ConfigureServices(IServiceCollection services)`
`34`	`34`	`});`
`35`	`35`
`36`	`36`	`// Sign-in users with the Microsoft identity platform`
`37`		`- services.AddSignIn(Configuration);`
	`37`	`+ services.AddMicrosoftWebApp(Configuration);`
`38`	`38`
`39`	`39`	`services.AddControllersWithViews(options =>`
`40`	`40`	`{`
Original file line number	Diff line number	Diff line change
`@@ -57,14 +57,14 @@ The actual sign-in audience (accounts to sign-in) is the lowest set of what is s`
`57`	`57`
`58`	`58`	`In order to restrict users from specific organizations from signing-in to your web app, you'll need to customize your code a bit more to restrict issuers. In Azure AD, the token issuers are the Azure AD tenants which issue tokens to applications.`
`59`	`59`
`60`		-In the `Startup.cs` file, in the `ConfigureServices` method, after `services.AddSignIn(Configuration)` add some code to validate specific issuers by overriding the `TokenValidationParameters.IssuerValidator` delegate.
	`60`	+In the `Startup.cs` file, in the `ConfigureServices` method, after `services.AddMicrosoftWebApp(Configuration)` add some code to validate specific issuers by overriding the `TokenValidationParameters.IssuerValidator` delegate.
`61`	`61`
`62`	`62`	```CSharp
`63`	`63`	`public void ConfigureServices(IServiceCollection services)`
`64`	`64`	`{`
`65`	`65`	`...`
`66`	`66`	`// Sign-in users with the Microsoft identity platform`
`67`		`- services.AddSignIn(Configuration, options =>`
	`67`	`+ services.AddMicrosoftWebApp(Configuration, options =>`
`68`	`68`	`{`
`69`	`69`	`Configuration.Bind("AzureAd", options);`
`70`	`70`	`// Restrict users to specific belonging to specific tenants`