我设法解决了

app.UseCors(policy => policy.SetIsOriginAllowed(origin => origin == "https://login.microsoftonline.com"));
app.UseAuthentication();
app.Use(async (context, next) =>
{
    if (!context.User.Identity.IsAuthenticated && context.Request.Path != "/signin-wsfed")
    {
        await context.ChallengeAsync(WsFederationDefaults.AuthenticationScheme);
    }
    else
    {
        await next();
    }
});