The basics of modern authentication - Microsoft identity platform

In this video, Nicholas Adman and Kyle Marsh explain the most basic concepts behind modern authentication, including a typical authentication and authorization flow, the tokens that are used and what they look like, and how to call more than one protected API.

Intro - 0:00
Basic modern authentication flow - 0:24
Single sign-on - 2:32
The ID token - 4:20
The access token - 7:26
Calling more than one protected API - 8:59
Summary - 10:49


► Follow us on social:

#ModernAuthentication #AzureAD #Identity

[zakiit]

Thanks & I wonder if there is a video that has more details about the different workflows that exists

[raulands]

When developing, how do we work with ID and Auth tokens?

[salvadorgarcia]

I would've liked if there was a transcript that would read what was said. it was a little hard to keep up with the conversation, but still very informative.

[kevin]

Around 5:40, Kyle mentions the audience of the token and instructs us to check it to ensure that its our application, but doesn't that mean we have access to other applications tokens?

[nolimitsREAL]

The one thing that I am probably missing, is how the access token is confirmed with the or in the API, that is the correct one ?

[richieroo]

8:42 "And then the API needs to validate the JWT signature..." - but you just said that you're sending the Access Token...which, as you said 1 minute before, is not a JWT!

It's little things like this that make this stuff harder than it needs to be.

[DataJuggler]

7:19 So funny you say 'Shouldn't use this as a key', yet the Microsoft Store uses email addresses as a key. .When I got a refund, my account was deleted, and then I signed up again I had to use an alternate email, when I have had one email for 10 years at the time, now 15. Now I can't remember my email, and no one from Microsoft can help me find my account. Too big a company, and do as a I say, not as I do.

[photoartbergmann]

What is the difference between API permissions and expose API in Azure AD?

[ssssssssssss]

I wish, additionally to videos, you guys would write articles for the same information.
Many people are readers and hate to hear voices when studying, in particular when the speakers are poor and a distraction. The alternating speakers in this video are particularly annoying, the video editing is less than mediocre.

[KenDiriwan]

As useful as this be i really dislike the throat-dominate kind of voice especially for technical explanation.
Just difficult to digest what was being said.
Maybe just my hearing problem.

Meanwhile Kyle's voice is really easy for me to listen