How to make authorization through AD in a web application?

Question

Active Directory

There is a dotnet backend that has access to the AD server. There is a html/csss/js web application that communicates with this backend via REST.
Task: to be able to log in to the web application with an account from AD.
How can I do that?
Ideally, it's quite simple: a username / password is entered, which are sent to the server that queries AD, which says whether the user is valid or invalid, and what rights he has.

Answer 1

Before you start writing your bicycles, I advise you to look here:
https://identityserver4.readthedocs.io/en/latest/
https://github.com/Nordes/IdentityServer4.LdapExtension
Well, in general, authentication can also be set in the form of ADFS ( or for example via Keycloak), but in order to advise you on this, you need to know your scope and business requirements.