Book Image

Azure Active Directory for Secure Application Development

By : Sjoukje Zaal
Book Image

Azure Active Directory for Secure Application Development

By: Sjoukje Zaal

Overview of this book

Azure Active Directory for Secure Application Development is your one-stop shop for learning how to develop secure applications using modern authentication techniques with Microsoft Azure AD. Whether you’re working with single-tenant, multi-tenant, or line-of-business applications, this book contains everything you need to secure them. The book wastes no time in diving into the practicalities of Azure AD. Right from the start, you’ll be setting up tenants, adding users, and registering your first application in Azure AD. The balance between grasping and applying theory is maintained as you move from the intermediate to the advanced: from the basics of OAuth to getting your hands dirty with building applications and registering them in Azure AD. Want to pin down the Microsoft Graph, Azure AD B2C, or authentication protocol best practices? We’ve got you covered. The full range of Azure AD functionality from a developer perspective is here for you to explore with confidence. By the end of this secure app development book, you’ll have developed the skill set that so many organizations are clamoring for. Security is mission-critical, and after reading this book, you will be too.
Table of Contents (14 chapters)
Part 1: Getting Started with the Microsoft Identity Platform
Part 2: Authentication and Protocols
Part 3: Azure AD B2C

Understanding how end users consent to applications

You can configure how end users consent to applications that you register inside Azure AD. Azure AD offers app consent policies for this that you can set for your apps. These policies describe the conditions that must be met before an app can be consented to. You can set policies with conditions for the app that is requesting access.

You can set limits on when the end users are allowed to grant consent to your applications by configuring the app consent policy in the Azure portal. You can also set policies to define when your apps need to request administrator review and approval.

There are four different types of consent settings:

  • Do not allow user consent: With this setting enabled, your end users can't grant permissions to applications. The users can continue to sign into applications that they previously consented to, or that have been consented to by an administrator. They will not be able to consent to new...