Book Image

Azure Active Directory for Secure Application Development

By : Sjoukje Zaal
Book Image

Azure Active Directory for Secure Application Development

By: Sjoukje Zaal

Overview of this book

Azure Active Directory for Secure Application Development is your one-stop shop for learning how to develop secure applications using modern authentication techniques with Microsoft Azure AD. Whether you’re working with single-tenant, multi-tenant, or line-of-business applications, this book contains everything you need to secure them. The book wastes no time in diving into the practicalities of Azure AD. Right from the start, you’ll be setting up tenants, adding users, and registering your first application in Azure AD. The balance between grasping and applying theory is maintained as you move from the intermediate to the advanced: from the basics of OAuth to getting your hands dirty with building applications and registering them in Azure AD. Want to pin down the Microsoft Graph, Azure AD B2C, or authentication protocol best practices? We’ve got you covered. The full range of Azure AD functionality from a developer perspective is here for you to explore with confidence. By the end of this secure app development book, you’ll have developed the skill set that so many organizations are clamoring for. Security is mission-critical, and after reading this book, you will be too.
Table of Contents (14 chapters)
1
Part 1: Getting Started with the Microsoft Identity Platform
5
Part 2: Authentication and Protocols
9
Part 3: Azure AD B2C

Securing your application using OAuth 2.0, OpenID Connect, and MSAL

In the previous sections of this chapter, we covered the different frameworks for authenticating your applications in depth. In this section, we are going to put this learning into practice. We are going to build an ASP.NET Core web application that is going to use OAuth 2.0, OpenID Connect, and MSAL to authenticate a user against Azure AD and call the Microsoft Graph API.

This demo is going to be divided into two parts. The first part is going to cover the OAuth 2.0, OpenID Connect, and MSAL aspects. The second part is going to focus 
on the Graph API. The second part is going to be covered in Chapter 6, Building Secure Services Using the Microsoft Graph API.

In the first section of this demo, we are going to register the necessary applications in Azure AD and set the required permissions. However, we are going to do this manually. Since we have already covered this part in previous chapters, there is...