Joonas Westlin • 1/6/2018

Using Azure AD On-Behalf-Of flow in an ASP.NET Core 2.0 API

Read Original

This article provides a detailed tutorial on using the Azure Active Directory On-Behalf-Of (OBO) flow within an ASP.NET Core 2.0 API. It explains the scenario where a web API, after receiving a user's token, exchanges it for a new token to call another protected API (like Microsoft Graph) on the user's behalf. The post covers the conceptual flow, startup configuration for JWT authentication, and the principle of using delegated permissions for least-privilege access.

0 comments
#API Security #Aspnet Core #OAUTH 20
Using Azure AD On-Behalf-Of flow in an ASP.NET Core 2.0 API

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week

1
Quoting Thariq Shihipar
Simon Willison • 2 votes
2
Using Browser Apis In React Practical Guide
Jivbcoop • 2 votes
3
Top picks — 2026 January
Paweł Grzybek • 1 votes
4
In Praise of –dry-run
Henrik Warne • 1 votes
5
Deep Learning is Powerful Because It Makes Hard Things Easy - Reflections 10 Years On
Ferenc Huszár • 1 votes
6
Vibe coding your first iOS app
William Denniss • 1 votes
7
AGI, ASI, A*I – Do we have all we need to get there?
John D. Cook • 1 votes
8
Dew Drop – January 15, 2026 (#4583)
Alvin Ashcraft • 1 votes