In the App_Start/Startup.Auth.cs class.

Put the setting in Web.config and use ConfigurationManager to retrieve the settings at runtime.

If we are working with sensitive information such as names, addresses, and bank account details, we should use an SSL encryption to protect the user and ourselves from malicious third parties interested in stealing our data.

There is a performance overhead using SSL, so if our content is not sensitive, then we get no benefit from encrypting it, and we degrade the performance.

A wildcard certificate.

Add a redirect to the Web.config file. Doing this in a transform allows us to apply this to release configs, so we can debug against the HTTP endpoint too.

Organizational Accounts.

Enable Organizational Authentication.

Azure Active Directory Graph API.

get-credential.