Azure function app secured by AAD: You do not have permission to view this directory or page

Question

My goal: secure my azure function by azure active directory.
Steps:

1. Created azure function app aes2020 under app service plan. Added function named 'key'.
2. Registered app under Active directory as 'AES' with redirect url=https://aes2020.azurewebsites.net/.auth/login/aad/callback.
3. Under function app, authentication / authorization, set 'Action to take..' to 'Login with Azure Active Directory'; under Express mode selected the registered function app as 'AES'.
4. Enabled CORS = *.

Problem: when I enter my function url https://aes2020.azurewebsites.net/api/key in Browser I am asked to login to Azure active directory but then get error 'You do not have permission to view this directory or page.'. The browser url shows the callback url https://aes2020.azurewebsites.net/.auth/login/aad/callback. I am able to access the function if I set anonymous access.

What more I need to do?

Thanks in advance.

Answer 1

I fixed the problem by checking ID tokens box in Azure Active Directory, App registrations, my function app, Authentication, Implicit grant. Found problem by seeing Azure AD log.

Thanks anyway.