Microsoft Identity Platform - Enable AAD authentication in App Service Web WebApp - Web pages & API
Azure @ Enterprise - Microsoft Identity Platform - Minimal settings to enable Azure Active Directory(AAD) based authentication in App Service Web App for Web Pages and Web API.
Link to previous video on enabling AAD authentication for web pages only.
• Microsoft Identity Platform-Minimal c...
Prerequisites
--------------------
Basic understanding of Web Application development
Basic understanding of Web API and accessing from Postman
Understanding of Azure AD-based authentication
Phases
-----------
1. Create and host Web & API application to Azure App Service Web App
2. Azure Active Directory App registrations
3. Enable authentication in AppService
Testing
-----------
The tutorial shows how the authentication settings can be tested using the browser as well as from Postman
Main Points
-------------------
1. It needs a minimum of 2 Azure AD App Registrations. One for producer ie the service app and 1 per each client application(s)
2. Application ID Uri of publisher app registration should be unique across Azure.
3. The Application ID URI should be used in App service as "Allowed Token Audience"
4. When client applications request JWT they should use the Application ID URI in the resource header.