We have accomplished a SSO integration using AzureAd in our ABP Blazor server application using the guide lines from this page: How To/Azure Active Directory Authentication MVC | Documentation Center | ABP.IO

This works just fine.

Now we want to add another web application that connects to our ABP application to access some of the application services inside the ABP Blazor application. We would like to use ABP’s proxy client as described here: API/Dynamic CSharp API Clients | Documentation Center | ABP.IO

Now we would like to use the managed identity (system assigned) from this new application to authenticate this new app against the ABP application. There is no documentation on how to add applications in the OpenIddictDataSeedContributor that specifies what parameters to use in our scenario.

I found a video (ABP Framework Consuming HTTP APIs from a .NET Client | ABP Community) about how to use the API client proxy with the default configuration but when I create a new ABP application using the CLI the console test application does not work. This guide is not about how to setup authentication for the client proxy and the sample no longer works since the console test application is no longer added to the OpenIddictApplications table through the seeder in de newly created solution.

Can anyone guide me to the right online resources to get our API client proxy authentication to work in using the app registration from Azure AD using the OpenIddict libraries and in the context of the ABP framework?