A guide on testing Azure AD-protected APIs using Postman, focusing on client credentials and application permissions.
A guide to configuring Swagger UI for testing Azure AD-protected APIs, using an ASP.NET Core 3.0 sample application.
Azure AD now blocks cross-tenant token attacks by preventing apps from getting tokens for tenants where they have no service principal.
Explains the importance of checking delegated and application permissions in Azure AD access tokens for API security, with ASP.NET Core examples.
Explains Azure AD Service Principals, their relationship to application objects, and how to create them for automation and permissions.
Guide on using a Service Principal for authentication with Power BI REST APIs and the PowerBIPS module, eliminating the need for a user account.
Explains why embedding secrets like API keys in native apps is a critical security flaw, with a practical demonstration.
Explains best practices for building secure multi-tenant Azure AD applications that restrict login to a specific set of known tenants.
Explains the OAuth Resource Owner Password Credentials (ROPC) grant flow in Azure AD, detailing its purpose and why it should be avoided in modern applications.
Explains security risks of wildcard reply URLs in MSAL.js and demonstrates a safer alternative using session storage for post-login redirects.
Compares using Azure AD groups vs. application roles for authorization, discussing pros, cons, and best practices for developers.
How to properly validate Azure AD tokens in a multitenant ASP.NET Core app using a custom issuer validator.
A technical guide on implementing Azure AD single sign-out in ASP.NET Core applications, explaining configuration and the SameSite cookie requirement.
Part 2 of a guide on implementing Azure AD authentication in ASP.NET Core APIs, covering custom permissions and multi-tenant configuration.
Summary of July 2018 updates to Azure AD Managed Service Identity, including new user-assigned identities and supported services.
A guide on using PowerShell to copy Office 365 user license configurations between accounts, addressing a common administrative challenge.
A technical guide on setting up Azure AD authentication for ASP.NET Core APIs, covering app registration, scope validation, and creating a test client.
Explains how to use Azure AD authentication and Managed Service Identity for secure, role-based access to Azure Storage Blobs and Queues.
Guide on using Azure AD Managed Service Identity with application permissions to securely call APIs without storing secrets.
Explains how to implement an opt-in calendar feature for an Azure AD v1 app by creating a separate app to manage delegated permissions.
