API Authentication with OAuth using Azure AD

Join this session to learn how to secure Web API’s using OAuth2 and Azure Active Directory using Client Credential flow ( Client ID + Secret ). The most common scenario is when your application has a resource ( api ) that needs to be securely consumed by one or more non interactive clients (e.g console apps or bash scripts). This pattern allows each client to have their own credentials to access the secure resource. With this approach, app team can control each client and provides ability to rotate the client secret or disable access to resource entirely.

[nagbalkur]

One of the best presentations I've ever heard in a short duration. Outstanding. hope more such videos will be made.

[wayneschroder]

Excellent talk! Succinctly hit on the core points, showing exactly how to implement the security setup. Thank you!

[jshriram]

I spent close to 4 days looking for a good demo on client + API registration and usage. This video saved me finally! Thanks a lot. It's amazing how many talentless people upload tech videos these days.

[tymofiidmytrenko]

Great explanation. Concise, straight to the point, clear. I was confused a bit after reading Zscaler's guide to OAuth2.0 setup and this video put everything in order. Thank you.

[o_nana]

This video tutorial was so good. Got clear understanding of how app registrations work and most importantly how resource side integration with AAD works. Essentially AAD is a middle trusted entity that both client and resource registers, and then we introduce the concept of roles to better manage permissions, which would have been a hassle otherwise as we'd have to assign and validate permissions from resource code side for each client on a case to case basis.

[sumitdas]

One of the best presentation so far I have learnt OAuth and utilisation in APIM. Thank you !!

[amarantes]

Excellent, core points well explained with no workarounds. Thanks for the tutorial

[horariojoselo]

Thank you very much for this tutorial gentlemen!

[morelias]

Thanks for sharing this resource, I am implementing this in a new system and it helps me a lot!

[SlamSector]

You're a life saver. I spend an insane amount of time on this.

[alanmangroo]

Great presentation. Very clear explanation.

[OCARBALO]

Really good video! Thanks for sharing!

[dineshghegade]

Excellent content and presentation too!! Thanks for shating

[faithyintii]

This a really good tutorial, thank you so much. !!!!

[hiicharles]

Finally found the step to setup azure ad and step to get access token without the need to login.

[os-ng]

Honestly really great presentation. I almost feel a bit bad because it looks like people didn't have any questions and looks like they were a bit disengaged from the presentation because of that, but maybe that's not the case and they were paying attention in the call. Either way I just wanted to say thanks, your presentation was incredible, exactly what I needed for my use case.

The only thing that I'd say is I wish you showed the Graph Explorer right after assigning the role when you said there's multiple ways of doing this. Because when I heard I need that consent to move forward I stopped, looked for the admin, sent a bunch of emails, waited a couple days to get the access, and then I continued the video and found out it was possible to do it by myself using the Graph Explorer. That would be the only thing that I'd change, I'd just put that right after that manual role assignment so that people know right away that there is another way without waiting for admin approval and how to do it.

But really great demo, loved it, keep up the good work!

[samuelgit]

very interesting video. Do you have a video or sample with net core 5 web api and client? using the actual AD B2C?

[Kunal]

How to use Bearer <token> Oauth using ADF pipeline ? I tried but not clear about how to do it...

[niteshkhambe]

Nice video.... A perfect explanation, this is what I was looking for. Hit the like gonna share with my colleagues and also Channel Subscribed channel as i'm gonna need more such understanding related to Azure. Thank You!

[harshildoshi]

This was very helpful. Any idea on how to configure scopes when there are 2 App registrations involved? Should the scope of Consumer match the Resource?