I want to know about the relationship between "Azure AD Graph Retirement" and the Azure app set as the ID provider of AppService

Question

I would like to know if the "Important Update: Azure AD Graph Retirement" posted on the following site will affect my AppService.

https://techcommunity.microsoft.com/blog/identity/what%e2%80%99s-new-in-microsoft-entra-%e2%80%93-june-2024/3796387

I have built an API in App Service, and have set an application registered with Entra ID as the ID provider.

This application was created several years ago, so only "User.Read" for "Azure Active Directory Graph" is set as the API permission. In addition, the scope is set by publishing the API.

When accessing the API built in App Service, I use "ADAL.js" to obtain a token from the application, and use that token to access the API built in App Service.

I do not use the Graph API at all with this application.

Given this situation, if anyone knows whether "Azure AD Graph Retirement" will have any impact, I would appreciate it if you could let me know.

We are currently in the process of migrating from using ADAL.js to using MSAL.js, but there is a possibility that we will not be able to complete the migration in time for January 31, 2025, so we would like to understand whether there will be any impacts.

*This text was created using Google Translate.

Answer 1

Yes, your app has “User.Read” permission for the Azure AD Graph API. This permission is associated with the legacy Azure AD Graph API. Also, ADAL.js is also being deprecated in favor of the MSal

You need to migrate: https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview

See FAQs and recommendations here:

https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-faq?source=recommendations

https://learn.microsoft.com/en-us/entra/identity/monitoring-health/recommendation-migrate-to-microsoft-graph-api?source=recommendations

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola