SlideShare a Scribd company logo

Azure Active Directory (Azure AD) for office 365 Developers : SPFestDC 2019

•
Prashant G Bhoyar (Microsoft MVP), profile picture
Prashant G Bhoyar (Microsoft MVP)

The document outlines a presentation about Azure Active Directory (Azure AD) for Office 365 developers, highlighting its importance in identity and access management for applications. It introduces the speaker, Prashant G. Bhoyar, and details his credentials along with the agenda for the session, including demos and audience engagement. The document also covers Azure AD's features, pricing, and its role in providing single sign-on (SSO) capabilities across various applications.

Technology
1 of 48
Download to read offline
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 1 SM @pgbhoyar #SharePointFestDC Prashant G Bhoyar MVP SharePoint Fest, Washington, DC, USA https://sharepointfest.com/DC/ 01 May 2019 Azure Active Directory (Azure AD) for Office 365 Developers
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 2 SM @pgbhoyar #SharePointFestDC Who AM I ? • Born and raised in India • Came to United States of America in 2007 for studies • University of Maryland College Park Alumni • Co-Author of the book “PowerShell for Office 365” • Technical Reviewer of the book “Pro : SharePoint 2013 Administration” • Founder and Organizer of Artificial Intelligence and Machine Learning User Group and DC-Metro Office 365 User Group ➢ Monthly in person & online free event ➢ https://www.meetup.com/ArtificialIntelligenceAndMachineLearning/ ➢ http://www.meetup.com/DC-Metro-Office-365-User-Group/ • Organizer of ➢ Global Azure Bootcamp – Day long free event ➢ AI Fest ➢ Azure Data Fest ➢ SharePoint Saturday Baltimore (SPSBMORE)- – Day long free event http://www.spsevents.org/city/baltimore ➢ Organizer of SharePoint Saturday DC ( SPSDC ) - Day long free event ➢ http://www.spsevents.org/city/DC/ Prashant G Bhoyar (PGB)
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 3 SM @pgbhoyar #SharePointFestDC Who AM I ? • Recipient of Antarctic Service Medal • Microsoft MVP ( Most Valuable Professional) • Solution Architect at Withum Smith and Brown PC ➢https://digital.withum.com ➢Former Portal Solutions ➢Focus on Microsoft Solutions and Services ➢Works in Bethesda, Maryland Office Prashant G Bhoyar (PGB)
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 4 SM @pgbhoyar #SharePointFestDC 01010101010101010101010101010010101010101010101010110011110101011000111110000000000000000000000 000000001111101101101101010101010101010101010101010010101010101010101010110011110101011000111110 00000000000000000000000000000111110110110111010101010101010101010101010010101010101010101010110 011110101011000111110000000000000000000000000000001111101101101101010101010101010101010101010010 101010101010101010110011110101011000111110000000000000000000000000000001111101101101101010101010 10101010101010101001010101010101010101011001111010101100011111000000000000000000000000000000111 110110110110101010101010101010101010101001010101010101010101011001111010101100011111000000000000 00000000000000000011111011011011 Microsoft MVPs On Staff 4 100+ Microsoft Cloud Deployments (Office 365, Azure, Dynamics, Power BI) 50+Consultants (Project Managers, Business Analysts, Developers, Data Scientists, Engineers, Software Developers, User Experience Designers) 16Years as: Microsoft Gold Partner About Withum Digital
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 5 SM @pgbhoyar #SharePointFestDC • 100 Level Session • What is Azure Active Directory? • Why we need to use/learn Azure AD? • Azure AD in the Enterprise • Azure AD in the Office 365 • How to get started? • Demos • Key Takeaways • Q&A Agenda
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 6 SM @pgbhoyar #SharePointFestDC Housekeeping ▪ Slides: https://www.slideshare.net/pgbhoyar ▪ Giveaway : PowerShell for Office 365 ▪ Drop your business card ▪ Ask lot of questions
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 7 SM @pgbhoyar #SharePointFestDC
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 8 SM @pgbhoyar #SharePointFestDC Audience Poll ▪ How many of you are Power Users? ▪ How many of you are Business Users? ▪ How many of you are IT pros? ▪ How many of you are Developers? ▪ How many of you are already using Azure Active Directory? ▪ How many of you have built custom membership/role provider? 8
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 9 SM @pgbhoyar #SharePointFestDC
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 10 SM @pgbhoyar #SharePointFestDC Authentication & Authorization Authentication Authorization • Always the First Step • Confirms the Identity • Example : Security queue at Airport • Comes after Authentication • Confirms the access level based on permissions • Example : Flight Boarding Pass at the Airport gate
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 11 SM @pgbhoyar #SharePointFestDC
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 12 SM @pgbhoyar #SharePointFestDC ▪ It is Software as a service offering (SaaS) ▪ It is Microsoft’s cloud-based identity and access management service ▪ It provides Single Sign on (SSO) between many applications like Office 365, Salesforce.com, Dropbox etc ▪ It is highly reliable and runs out of Microsoft’s data centers around the world 12 Source :https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/ What is Azure Active Directory?
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 13 SM @pgbhoyar #SharePointFestDC ▪ IT admins. ▪ To control access to your apps and your app resources, based on your business requirements. ▪ To require multi-factor authentication when accessing important organizational resources. ▪ To automate user provisioning between your existing Windows Server AD and your cloud apps, including Office 365. ▪ To automatically help protect user identities and credentials and to meet your access governance requirements. 13 Source :https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/ Who uses Azure Active Directory?
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 14 SM @pgbhoyar #SharePointFestDC ▪ App developers. ▪ Azure AD gives us a standards-based approach for adding single sign-on (SSO) to your app, allowing it to work with a user's pre-existing credentials. ▪ Provides APIs that can help you build personalized app experiences leveraging existing organizational data. ▪ Microsoft 365, Office 365, Azure, or Dynamics CRM Online subscribers. ▪ As a subscriber, you're already using Azure AD. ▪ Each Microsoft 365, Office 365, Azure, and Dynamics CRM Online tenant is automatically an Azure AD tenant. ▪ We can immediately start to manage access to your integrated cloud apps. 14 Source :https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/ Who uses Azure Active Directory?
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 15 SM @pgbhoyar #SharePointFestDC
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 16 SM @pgbhoyar #SharePointFestDC Why We Should Care About Azure AD? ▪ This is golden age for technical innovation ▪ The “New” Microsoft is launching lot of new services/products rapidly ▪ But the life span of new productions/services is decreasing • Access Services : https://techcommunity.microsoft.com/t5/Office- Retirement-Blog/Updating-the-Access-Services-in-SharePoint-Roadmap/ba- p/57148 ▪ We need to spend some time doing research before investing time to learn/explore new product/services 16
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 17 SM @pgbhoyar #SharePointFestDC
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 18 SM @pgbhoyar #SharePointFestDC Why We Should Care About Azure AD? ▪ Azure AD is the defacto authentication choice in the Microsoft World ▪ It is backbone of Office 365 and Azure and we should learn it or at least get familiar with it ▪ The name is misleading • Lot of developers think AD means IT Pro Stuff…☺ ▪ It is basically an authentication and authorization service provided as a subscription ▪ It enables Application developers to focus on building the applications 18
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 19 SM @pgbhoyar #SharePointFestDC ▪ Only Azure Active Directory ▪ Less common ▪ Local Active Directory Synced with Azure AD ▪ Common ▪ Azure Active Directory Domain Services ▪ Domain Join Win 10 and Win 2016 machines 19 Source : https://docs.microsoft.com/en-us/azure/active-directory/active-directory-aadconnect Scenarios
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 20 SM @pgbhoyar #SharePointFestDC Azure AD in the Enterprise ▪ Synced with on-premises users ▪ Enable SSO (Single Sign On) between many applications ▪ Can be used with any development platform ▪ Can be used instead of ASP.NET Identity Source :https://docs.com/OfficeDevPnP/4436/pnp-web-cast-what-should-every-sharepoint?fromAR=1
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 21 SM @pgbhoyar #SharePointFestDC
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 22 SM @pgbhoyar #SharePointFestDC Azure AD Pricing as of May 01st 2019 ☺ ▪ Comes in 5 editions • Free  Comes with Office 365, Azure subscription • Basic • Premium P1 • Premium P2 • Office 365 Apps 22 Source :https://azure.microsoft.com/en-us/pricing/details/active-directory/
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 23 SM @pgbhoyar #SharePointFestDC Azure AD Pricing as of May 01st 2019 ☺ Features Free Basic Premiu m P1 Premiu m P2 Office 365 Apps Directory Objects 500,000 object limit No object limit No Object Limit No Object Limit No Object Limit Single Sign-On (SSO) 10 apps per user 10 apps per user No Limit No Limit 10 apps per user Join a device to Azure AD, Desktop SSO, Microsoft Passport for Azure AD, Administrator Bitlocker recovery Yes Yes Yes Yes Company Branding (Logon Pages/Access Panel customization) Yes Yes Yes Yes Multi-Factor Authentication Yes Yes Yes Pricing 1$ User/Month $6 User/Month $9 User/Month Source :https://azure.microsoft.com/en-us/pricing/details/active-directory/
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 24 SM @pgbhoyar #SharePointFestDC Azure AD and Office 365 ▪ Every Office 365 tenant has Azure AD ▪ SharePoint Online Add-ins (AppRegNew.aspx) are enrolled in Azure AD • <SiteUrl>/_layouts/15/AppRegNew.aspx ▪ In Azure AD we can authorize web applications to access other tenant data ▪ Azure AD has much more user data ▪ The Microsoft Graph API • We need to get the access token from Azure AD first to make the call Source :
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 25 SM @pgbhoyar #SharePointFestDC Azure AD and Office 365 Applications ▪ Azure AD stores custom application registration • Web or REST API • Native Application ▪ OpenID for Authentication and OAuth 2.0 for authorization ▪ Enforces authorization rules • Between applications and API • Out of the box registered API for Office 365 • Or Custom Implemented REST API Services
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 26 SM @pgbhoyar #SharePointFestDC Microsoft Authentication Library (MSAL) ▪ SDK for gaining access to API protected by Microsoft identities • Fully OSS, easy to use, full-featured, production-ready • Works with Azure AD v2 (work & school accounts, personal accounts) and B2C ▪ Available on • .NET 4,5x, .NET Core, Xamarin (iOS, Android, UWP) • iOS (ObjC/Swift) • Android (Java) • Javascript ▪ SafariViewController on iOS, Chrome custom tabs on Android
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 27 SM @pgbhoyar #SharePointFestDC MSAL PublicClientApplication myApp = new PublicClientApplication("a7d8cef0-4145-49b2-a91d-95c54051fa3f") string[] scopes = { "Mail.Read" }; AuthenticationResult rez = await myApp.AcquireTokenAsync(scopes);
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 28 SM @pgbhoyar #SharePointFestDC Azure AD auth endpoints Work and school Personal with ADAL
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 29 SM @pgbhoyar #SharePointFestDC App Registration v1.0 ▪ Any Application that uses Azure AD for authentication must be registered in Azure AD ▪ To register an App we need • Application ID URI  Identifier for application • Reply URL  Azure AD will do a redirect to this url after successful authentication • ClientID  Unique ID ( GUID) for application generated by Azure AD • Permissions  What access right does this App will have? Source :https://docs.microsoft.com/en-us/azure/active-directory/active-directory-integrating- applications
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 30 SM @pgbhoyar #SharePointFestDC App registration v2.0 Create a new application https://apps.dev.microsoft.com A unique Id is created for your app Add app platform • Web App, SPA, Daemon • Native App • Web API (Office Add-in) Add permissions for admin consent flows • For delegated access for all users in the organization • For application access
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 31 SM @pgbhoyar #SharePointFestDC App types and permissions Users can consent for their data or admin can consent for all users Only admin can consent Delegated permissions User privileges App permissions Permission type: applicationPermission type: delegated https://developer.microsoft.com/en-us/graph/docs/concepts/permissions_reference Get access on behalf of users Get access as a service Effective permissionEffective permission
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 32 SM @pgbhoyar #SharePointFestDC Consent ▪ Users grant delegated permissions to apps via consent ▪ Consent prompts are shown at first token request time ▪ User consent is recorded individually ▪ Want to only prompt once per tenant? Admin consent
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 33 SM @pgbhoyar #SharePointFestDC App vs User Permissions ▪ Web apps have their own identity • OAuth2 “confidential clients” ▪ Resources can expose application permissions ▪ Application permissions: • Are granted via admin consent • Once granted, they endow the app with the corresponding privilege
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 34 SM @pgbhoyar #SharePointFestDC Modern authentication protocols ▪ OAuth 2.0 for delegation of access  Allows the user to consent (give permission) for one service to access the user’s data held by another service – Administrator can consent to access on the user’s behalf  Claims held in an access_token ▪ OpenID Connect  Adds authentication to OAuth 2.0  Claims held in a id_token ▪ JSON Web Token (JWT) mandated in OpenID Connect • Used in most OAuth 2.0 implementations
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 35 SM @pgbhoyar #SharePointFestDC JWT - Lightweight
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 36 SM @pgbhoyar #SharePointFestDC ▪ Authentication libraries available for most platforms • .NET OpenID Connect middleware for web applications • Active Directory Authentication Library (ADAL) for native and web apps  Connects to Azure AD v1 endpoints • Microsoft Authentication Library (MSAL) for native and web apps  Connects to v2 endpoints to authenticate users with a Microsoft or Azure AD account – v2 endpoints introduce new feature and do not currently support all the functionality of the v1 endpoints Development support
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 37 SM @pgbhoyar #SharePointFestDC Asking for Consent ▪ Administrators can consent on behalf of all users Some consents need admin privileges
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 38 SM @pgbhoyar #SharePointFestDC Auth access_token MSAL or ADAL YOUR APP Your Application id_token access_token refresh_toke n Microsoft Identity
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 39 SM @pgbhoyar #SharePointFestDC Demo
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 40 SM @pgbhoyar #SharePointFestDC ▪ Sign up for Office 365 Developer Program at http://dev.office.com/ ▪ Get 1 year of Office 365 subscription for free ▪ Excellent for personal development use ▪ 1 Month Trial ▪ https://products.office.com/en- us/business/compare-office-365- for-business-plans 40 How to get personal Office 365 Developer Tenant?
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 41 SM @pgbhoyar #SharePointFestDC
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 42 SM @pgbhoyar #SharePointFestDC 42 How to get personal Azure Subscription? ▪ If you have MSDN Enterprise subscription ▪ You can get $150/month Azure credits for free ▪ Sign Up for Free trial : https://azure.microsoft.com/ ▪ Credit Card is required ▪ Microsoft Imagine ▪ Former Dreamspark ▪ No credit card required ▪ Valid .edu account from participating school/institution ▪ Limited feature sets
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 43 SM @pgbhoyar #SharePointFestDC Key Takeaways ▪ Hopefully the contents we covered today made you to explore Azure AD and you will go home and play with it ☺ ▪ Sign up for Developer Program using https://dev.office.com/ ▪ Check out Microsoft Graph APIs • https://developer.microsoft.com/en-us/graph/ ▪ Spend some time doing research before investing time to learn/explore new product/services
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 44 SM @pgbhoyar #SharePointFestDC
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 45 SM @pgbhoyar #SharePointFestDC Recap ▪ What is Azure Active Directory? ▪ Why we need to use/learn Azure AD? ▪ Azure AD in the Enterprise ▪ Azure AD in the Office 365 ▪ How to get started? ▪ Demos ▪ Key Takeaways 45
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 46 SM @pgbhoyar #SharePointFestDC References Appendix/Resources Getting Started https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/ https://azure.microsoft.com/en-us/documentation/articles/active-directory-developers-guide/ Pricing https://azure.microsoft.com/en-us/pricing/details/active-directory/
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 47 SM @pgbhoyar #SharePointFestDC Q&A
WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 48 SM @pgbhoyar #SharePointFestDC Questions? Feedback? Contact me: ▪ Email: pgbhoyar@gmail.com ▪ Twitter: @PGBhoyar ▪ Blog: http://pgbhoyar.com ▪ LinkedIn: https://www.linkedin.com/in/pgbhoyar/ ▪ Slides :https://www.slideshare.net/pgbhoyar ▪ Free Consulting/ Q&A: https://pgbhoyar.com/free-question-answer-session/ ▪ Feedback : Please provide feedback ▪ Event App ▪ Email Thank You Organizers, Sponsors and You for Making this Possible.

More Related Content

What's hot (20)

PPTX
SharePoint Benefits
Sameh Senosi
 
PDF
Building Business Applications for Office 365 SharePoint Online using Azure M...
Prashant G Bhoyar (Microsoft MVP)
 
PPTX
SharePoint - You've got it, now what?
Robert Crane
 
PPTX
SharePoint 2016 & Office 365: A Look Ahead To What’s Coming
Richard Harbridge
 
PPTX
Creating Custom Actions within SharePoint
Geoff Varosky
 
PPTX
SharePoint Saturday Hartford - 01/29/11 - Creating Custom Actions in SharePoi...
Geoff Varosky
 
PDF
NOW I Get it!! What SharePoint IS and why I need it
Mark Rackley
 
PPTX
The SharePoint & jQuery Guide
Mark Rackley
 
PPTX
Navigating the mess of a Shared Network Drive Migration to SharePoint - SPS B...
Joanne Klein
 
PPTX
Guiding a Successful SharePoint Implementation
Randy Williams
 
PPTX
Becoming a SharePoint Design Ninja
Kanwal Khipple
 
PDF
Discover SharePoint 2013
Benjamin Niaulin
 
PDF
SPT 104 Unlock your big data with analytics and BI on Office 365
Brian Culver
 
PDF
Should you migrate to SharePoint 2013?
Benjamin Niaulin
 
PPTX
10 AWESOME Things We've Done With SharePoint
Regroove
 
PPTX
SharePoint Online - Friend or Foe
Jasper Oosterveld
 
PDF
What's new in SharePoint 2013 - Discover it
Benjamin Niaulin
 
PPTX
What is SharePoint Development??
Mark Rackley
 
PPTX
Presentation at SMBITPro meeting June 2009
Robert Crane
 
PPTX
Branding Office 365 SharePoint Days
Sonja Madsen
 
SharePoint Benefits
Sameh Senosi
 
Building Business Applications for Office 365 SharePoint Online using Azure M...
Prashant G Bhoyar (Microsoft MVP)
 
SharePoint - You've got it, now what?
Robert Crane
 
SharePoint 2016 & Office 365: A Look Ahead To What’s Coming
Richard Harbridge
 
Creating Custom Actions within SharePoint
Geoff Varosky
 
SharePoint Saturday Hartford - 01/29/11 - Creating Custom Actions in SharePoi...
Geoff Varosky
 
NOW I Get it!! What SharePoint IS and why I need it
Mark Rackley
 
The SharePoint & jQuery Guide
Mark Rackley
 
Navigating the mess of a Shared Network Drive Migration to SharePoint - SPS B...
Joanne Klein
 
Guiding a Successful SharePoint Implementation
Randy Williams
 
Becoming a SharePoint Design Ninja
Kanwal Khipple
 
Discover SharePoint 2013
Benjamin Niaulin
 
SPT 104 Unlock your big data with analytics and BI on Office 365
Brian Culver
 
Should you migrate to SharePoint 2013?
Benjamin Niaulin
 
10 AWESOME Things We've Done With SharePoint
Regroove
 
SharePoint Online - Friend or Foe
Jasper Oosterveld
 
What's new in SharePoint 2013 - Discover it
Benjamin Niaulin
 
What is SharePoint Development??
Mark Rackley
 
Presentation at SMBITPro meeting June 2009
Robert Crane
 
Branding Office 365 SharePoint Days
Sonja Madsen
 

Similar to Azure Active Directory (Azure AD) for office 365 Developers : SPFestDC 2019 (20)

PDF
Azure Active Directory for Office 365 Developers SPFEST DC 2018
Prashant G Bhoyar (Microsoft MVP)
 
PDF
SPEngage Raleigh 2017 Azure Active Directory For Office 365 Developers
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Identity and Access Management from Microsoft and Razor Technology
David J Rosenthal
 
PPTX
Make IT Pro's great again: Microsoft Azure for the SharePoint professional
BIWUG
 
PPTX
History of Content Security: Take 2 - ShareCloudSummit Houston
Adam Levithan
 
PDF
21-06-2018 aOS Aix 3 Seven ways identity enriches your Office 365 and Azure e...
aOS Community
 
PPTX
2018 November - AZUGDK - Azure AD
Peter Selch Dahl
 
PPTX
NIC 2017 Azure AD Identity Protection and Conditional Access: Using the Micro...
Morgan Simonsen
 
PPTX
Azure AD with Office 365 and Beyond!
Ravikumar Sathyamurthy
 
PDF
15th December 2016 - Microsoft Paddington Vuzion Partner Event
Vuzion
 
PPTX
What's new in Azure Active Directory and what's coming new ?
Vignesh Ganesan I Microsoft MVP
 
PPTX
Office 365 Saturday - Office 365 Security Best Practices
Benoit HAMET
 
PPTX
Solving the security & compliance puzzle for Office 365 and Microsoft 365
Albert Hoitingh
 
PPTX
Administrators guide to managing Microsoft 365 and collaboration workloads - ...
Chirag Patel
 
PPTX
MTX Portland Office 365 Strategic Capabilities Sep2017
Owen Allen
 
PPTX
Interesting EMS Sessions for Ignite 2018
JoshuaLanier5
 
PDF
Introduction to Microsoft Enterprise Mobility + Security
AntonioMaio2
 
PDF
CIAOPS Need to Know Azure Webinar - January 2018
Robert Crane
 
PPTX
What small businesses need to know about Azure AD premium
Miguel Tena
 
PPTX
Hitchhiker's Guide to Azure AD - SPSKC
Max Fritz
 
Azure Active Directory for Office 365 Developers SPFEST DC 2018
Prashant G Bhoyar (Microsoft MVP)
 
SPEngage Raleigh 2017 Azure Active Directory For Office 365 Developers
Prashant G Bhoyar (Microsoft MVP)
 
Identity and Access Management from Microsoft and Razor Technology
David J Rosenthal
 
Make IT Pro's great again: Microsoft Azure for the SharePoint professional
BIWUG
 
History of Content Security: Take 2 - ShareCloudSummit Houston
Adam Levithan
 
21-06-2018 aOS Aix 3 Seven ways identity enriches your Office 365 and Azure e...
aOS Community
 
2018 November - AZUGDK - Azure AD
Peter Selch Dahl
 
NIC 2017 Azure AD Identity Protection and Conditional Access: Using the Micro...
Morgan Simonsen
 
Azure AD with Office 365 and Beyond!
Ravikumar Sathyamurthy
 
15th December 2016 - Microsoft Paddington Vuzion Partner Event
Vuzion
 
What's new in Azure Active Directory and what's coming new ?
Vignesh Ganesan I Microsoft MVP
 
Office 365 Saturday - Office 365 Security Best Practices
Benoit HAMET
 
Solving the security & compliance puzzle for Office 365 and Microsoft 365
Albert Hoitingh
 
Administrators guide to managing Microsoft 365 and collaboration workloads - ...
Chirag Patel
 
MTX Portland Office 365 Strategic Capabilities Sep2017
Owen Allen
 
Interesting EMS Sessions for Ignite 2018
JoshuaLanier5
 
Introduction to Microsoft Enterprise Mobility + Security
AntonioMaio2
 
CIAOPS Need to Know Azure Webinar - January 2018
Robert Crane
 
What small businesses need to know about Azure AD premium
Miguel Tena
 
Hitchhiker's Guide to Azure AD - SPSKC
Max Fritz
 
Ad

More from Prashant G Bhoyar (Microsoft MVP) (20)

PDF
Building Intelligent bots using microsoft bot framework and cognitive service...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Microsoft Flow for SharePoint Designer Workflow Professionals-SPFestDC2019
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Getting Started with SharePoint Patterns and Practices Provisioning Engine-SP...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Microsoft Bot Framework for SharePoint Developers-SPFestDC2019
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Microsoft Flow For Developers
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Introduction to AI and Cognitive Services For Microsoft 365 Developers and In...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Introduction to AI and Cognitive Services for O365 Devs Azure Bootcamp Reston
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Getting started with Microsoft Graph APIs SP FEST DC 2018
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Introduction to AI and Cognitive Services for Office 365 Developers SPFest DC...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Getting Started with SharePoint REST APIs in Custom Sharepoint Workflows - SP...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Getting Started with Office 365 Developers Patterns and Practices Provisionin...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Getting Started with Microsoft Graph API SPTechCon Washington DC 2017
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Writing Futuristic Workflows in Office 365 SharePoint On Prem 2013 2016 - SPT...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Getting started with SharePoint REST API in custom SharePoint workflows Resto...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Writing Futuristic Workflows in Office 365 SharePoint 2013 2016 on premise
Prashant G Bhoyar (Microsoft MVP)
 
PPTX
Writing futuristic workflows in office 365 SharePoint 2013 2016 on premise
Prashant G Bhoyar (Microsoft MVP)
 
PDF
SharePoint Fest Seattle 2017 Getting started with office365 sharepoint online...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Getting Started With SharePoint REST API in Nintex Workflows for Office 365 I...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Future Proofing your Workflow Investment How to Develop Maintainable Custom W...
Prashant G Bhoyar (Microsoft MVP)
 
PDF
Building Business Applications in Office 365 SharePoint Online Using Logic Apps
Prashant G Bhoyar (Microsoft MVP)
 
Building Intelligent bots using microsoft bot framework and cognitive service...
Prashant G Bhoyar (Microsoft MVP)
 
Microsoft Flow for SharePoint Designer Workflow Professionals-SPFestDC2019
Prashant G Bhoyar (Microsoft MVP)
 
Getting Started with SharePoint Patterns and Practices Provisioning Engine-SP...
Prashant G Bhoyar (Microsoft MVP)
 
Microsoft Bot Framework for SharePoint Developers-SPFestDC2019
Prashant G Bhoyar (Microsoft MVP)
 
Microsoft Flow For Developers
Prashant G Bhoyar (Microsoft MVP)
 
Introduction to AI and Cognitive Services For Microsoft 365 Developers and In...
Prashant G Bhoyar (Microsoft MVP)
 
Introduction to AI and Cognitive Services for O365 Devs Azure Bootcamp Reston
Prashant G Bhoyar (Microsoft MVP)
 
Getting started with Microsoft Graph APIs SP FEST DC 2018
Prashant G Bhoyar (Microsoft MVP)
 
Introduction to AI and Cognitive Services for Office 365 Developers SPFest DC...
Prashant G Bhoyar (Microsoft MVP)
 
Getting Started with SharePoint REST APIs in Custom Sharepoint Workflows - SP...
Prashant G Bhoyar (Microsoft MVP)
 
Getting Started with Office 365 Developers Patterns and Practices Provisionin...
Prashant G Bhoyar (Microsoft MVP)
 
Getting Started with Microsoft Graph API SPTechCon Washington DC 2017
Prashant G Bhoyar (Microsoft MVP)
 
Writing Futuristic Workflows in Office 365 SharePoint On Prem 2013 2016 - SPT...
Prashant G Bhoyar (Microsoft MVP)
 
Getting started with SharePoint REST API in custom SharePoint workflows Resto...
Prashant G Bhoyar (Microsoft MVP)
 
Writing Futuristic Workflows in Office 365 SharePoint 2013 2016 on premise
Prashant G Bhoyar (Microsoft MVP)
 
Writing futuristic workflows in office 365 SharePoint 2013 2016 on premise
Prashant G Bhoyar (Microsoft MVP)
 
SharePoint Fest Seattle 2017 Getting started with office365 sharepoint online...
Prashant G Bhoyar (Microsoft MVP)
 
Getting Started With SharePoint REST API in Nintex Workflows for Office 365 I...
Prashant G Bhoyar (Microsoft MVP)
 
Future Proofing your Workflow Investment How to Develop Maintainable Custom W...
Prashant G Bhoyar (Microsoft MVP)
 
Building Business Applications in Office 365 SharePoint Online Using Logic Apps
Prashant G Bhoyar (Microsoft MVP)
 
Ad

Recently uploaded (20)

PDF
visibel.ai Company Profile – Real-Time AI Solution for CCTV
visibelaiproject
 
PPTX
Earn Agentblazer Status with Slack Community Patna.pptx
SanjeetMishra29
 
PPTX
AI Code Generation Risks (Ramkumar Dilli, CIO, Myridius)
Priyanka Aash
 
PPTX
python advanced data structure dictionary with examples python advanced data ...
sprasanna11
 
PDF
How Current Advanced Cyber Threats Transform Business Operation
Eryk Budi Pratama
 
PPTX
Agentic AI in Healthcare Driving the Next Wave of Digital Transformation
danielle hunter
 
PDF
RAT Builders - How to Catch Them All [DeepSec 2024]
malmoeb
 
PPTX
Agile Chennai 18-19 July 2025 Ideathon | AI Powered Microfinance Literacy Gui...
AgileNetwork
 
PDF
Integrating IIoT with SCADA in Oil & Gas A Technical Perspective.pdf
Rejig Digital
 
PDF
How ETL Control Logic Keeps Your Pipelines Safe and Reliable.pdf
Stryv Solutions Pvt. Ltd.
 
PDF
Per Axbom: The spectacular lies of maps
Nexer Digital
 
PDF
Market Insight : ETH Dominance Returns
CIFDAQ
 
PDF
Peak of Data & AI Encore - Real-Time Insights & Scalable Editing with ArcGIS
Safe Software
 
PPTX
AVL ( audio, visuals or led ), technology.
Rajeshwri Panchal
 
PDF
OpenInfra ID 2025 - Are Containers Dying? Rethinking Isolation with MicroVMs.pdf
Muhammad Yuga Nugraha
 
PDF
Alpha Altcoin Setup : TIA - 19th July 2025
CIFDAQ
 
PDF
Researching The Best Chat SDK Providers in 2025
Ray Fields
 
PDF
TrustArc Webinar - Navigating Data Privacy in LATAM: Laws, Trends, and Compli...
TrustArc
 
PPTX
Applied-Statistics-Mastering-Data-Driven-Decisions.pptx
parmaryashparmaryash
 
PDF
Responsible AI and AI Ethics - By Sylvester Ebhonu
Sylvester Ebhonu
 
visibel.ai Company Profile – Real-Time AI Solution for CCTV
visibelaiproject
 
Earn Agentblazer Status with Slack Community Patna.pptx
SanjeetMishra29
 
AI Code Generation Risks (Ramkumar Dilli, CIO, Myridius)
Priyanka Aash
 
python advanced data structure dictionary with examples python advanced data ...
sprasanna11
 
How Current Advanced Cyber Threats Transform Business Operation
Eryk Budi Pratama
 
Agentic AI in Healthcare Driving the Next Wave of Digital Transformation
danielle hunter
 
RAT Builders - How to Catch Them All [DeepSec 2024]
malmoeb
 
Agile Chennai 18-19 July 2025 Ideathon | AI Powered Microfinance Literacy Gui...
AgileNetwork
 
Integrating IIoT with SCADA in Oil & Gas A Technical Perspective.pdf
Rejig Digital
 
How ETL Control Logic Keeps Your Pipelines Safe and Reliable.pdf
Stryv Solutions Pvt. Ltd.
 
Per Axbom: The spectacular lies of maps
Nexer Digital
 
Market Insight : ETH Dominance Returns
CIFDAQ
 
Peak of Data & AI Encore - Real-Time Insights & Scalable Editing with ArcGIS
Safe Software
 
AVL ( audio, visuals or led ), technology.
Rajeshwri Panchal
 
OpenInfra ID 2025 - Are Containers Dying? Rethinking Isolation with MicroVMs.pdf
Muhammad Yuga Nugraha
 
Alpha Altcoin Setup : TIA - 19th July 2025
CIFDAQ
 
Researching The Best Chat SDK Providers in 2025
Ray Fields
 
TrustArc Webinar - Navigating Data Privacy in LATAM: Laws, Trends, and Compli...
TrustArc
 
Applied-Statistics-Mastering-Data-Driven-Decisions.pptx
parmaryashparmaryash
 
Responsible AI and AI Ethics - By Sylvester Ebhonu
Sylvester Ebhonu
 

Azure Active Directory (Azure AD) for office 365 Developers : SPFestDC 2019

  • 1. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 1 SM @pgbhoyar #SharePointFestDC Prashant G Bhoyar MVP SharePoint Fest, Washington, DC, USA https://sharepointfest.com/DC/ 01 May 2019 Azure Active Directory (Azure AD) for Office 365 Developers
  • 2. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 2 SM @pgbhoyar #SharePointFestDC Who AM I ? • Born and raised in India • Came to United States of America in 2007 for studies • University of Maryland College Park Alumni • Co-Author of the book “PowerShell for Office 365” • Technical Reviewer of the book “Pro : SharePoint 2013 Administration” • Founder and Organizer of Artificial Intelligence and Machine Learning User Group and DC-Metro Office 365 User Group ➢ Monthly in person & online free event ➢ https://www.meetup.com/ArtificialIntelligenceAndMachineLearning/ ➢ http://www.meetup.com/DC-Metro-Office-365-User-Group/ • Organizer of ➢ Global Azure Bootcamp – Day long free event ➢ AI Fest ➢ Azure Data Fest ➢ SharePoint Saturday Baltimore (SPSBMORE)- – Day long free event http://www.spsevents.org/city/baltimore ➢ Organizer of SharePoint Saturday DC ( SPSDC ) - Day long free event ➢ http://www.spsevents.org/city/DC/ Prashant G Bhoyar (PGB)
  • 3. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 3 SM @pgbhoyar #SharePointFestDC Who AM I ? • Recipient of Antarctic Service Medal • Microsoft MVP ( Most Valuable Professional) • Solution Architect at Withum Smith and Brown PC ➢https://digital.withum.com ➢Former Portal Solutions ➢Focus on Microsoft Solutions and Services ➢Works in Bethesda, Maryland Office Prashant G Bhoyar (PGB)
  • 4. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 4 SM @pgbhoyar #SharePointFestDC 01010101010101010101010101010010101010101010101010110011110101011000111110000000000000000000000 000000001111101101101101010101010101010101010101010010101010101010101010110011110101011000111110 00000000000000000000000000000111110110110111010101010101010101010101010010101010101010101010110 011110101011000111110000000000000000000000000000001111101101101101010101010101010101010101010010 101010101010101010110011110101011000111110000000000000000000000000000001111101101101101010101010 10101010101010101001010101010101010101011001111010101100011111000000000000000000000000000000111 110110110110101010101010101010101010101001010101010101010101011001111010101100011111000000000000 00000000000000000011111011011011 Microsoft MVPs On Staff 4 100+ Microsoft Cloud Deployments (Office 365, Azure, Dynamics, Power BI) 50+Consultants (Project Managers, Business Analysts, Developers, Data Scientists, Engineers, Software Developers, User Experience Designers) 16Years as: Microsoft Gold Partner About Withum Digital
  • 5. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 5 SM @pgbhoyar #SharePointFestDC • 100 Level Session • What is Azure Active Directory? • Why we need to use/learn Azure AD? • Azure AD in the Enterprise • Azure AD in the Office 365 • How to get started? • Demos • Key Takeaways • Q&A Agenda
  • 6. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 6 SM @pgbhoyar #SharePointFestDC Housekeeping ▪ Slides: https://www.slideshare.net/pgbhoyar ▪ Giveaway : PowerShell for Office 365 ▪ Drop your business card ▪ Ask lot of questions
  • 7. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 7 SM @pgbhoyar #SharePointFestDC
  • 8. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 8 SM @pgbhoyar #SharePointFestDC Audience Poll ▪ How many of you are Power Users? ▪ How many of you are Business Users? ▪ How many of you are IT pros? ▪ How many of you are Developers? ▪ How many of you are already using Azure Active Directory? ▪ How many of you have built custom membership/role provider? 8
  • 9. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 9 SM @pgbhoyar #SharePointFestDC
  • 10. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 10 SM @pgbhoyar #SharePointFestDC Authentication & Authorization Authentication Authorization • Always the First Step • Confirms the Identity • Example : Security queue at Airport • Comes after Authentication • Confirms the access level based on permissions • Example : Flight Boarding Pass at the Airport gate
  • 11. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 11 SM @pgbhoyar #SharePointFestDC
  • 12. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 12 SM @pgbhoyar #SharePointFestDC ▪ It is Software as a service offering (SaaS) ▪ It is Microsoft’s cloud-based identity and access management service ▪ It provides Single Sign on (SSO) between many applications like Office 365, Salesforce.com, Dropbox etc ▪ It is highly reliable and runs out of Microsoft’s data centers around the world 12 Source :https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/ What is Azure Active Directory?
  • 13. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 13 SM @pgbhoyar #SharePointFestDC ▪ IT admins. ▪ To control access to your apps and your app resources, based on your business requirements. ▪ To require multi-factor authentication when accessing important organizational resources. ▪ To automate user provisioning between your existing Windows Server AD and your cloud apps, including Office 365. ▪ To automatically help protect user identities and credentials and to meet your access governance requirements. 13 Source :https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/ Who uses Azure Active Directory?
  • 14. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 14 SM @pgbhoyar #SharePointFestDC ▪ App developers. ▪ Azure AD gives us a standards-based approach for adding single sign-on (SSO) to your app, allowing it to work with a user's pre-existing credentials. ▪ Provides APIs that can help you build personalized app experiences leveraging existing organizational data. ▪ Microsoft 365, Office 365, Azure, or Dynamics CRM Online subscribers. ▪ As a subscriber, you're already using Azure AD. ▪ Each Microsoft 365, Office 365, Azure, and Dynamics CRM Online tenant is automatically an Azure AD tenant. ▪ We can immediately start to manage access to your integrated cloud apps. 14 Source :https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/ Who uses Azure Active Directory?
  • 15. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 15 SM @pgbhoyar #SharePointFestDC
  • 16. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 16 SM @pgbhoyar #SharePointFestDC Why We Should Care About Azure AD? ▪ This is golden age for technical innovation ▪ The “New” Microsoft is launching lot of new services/products rapidly ▪ But the life span of new productions/services is decreasing • Access Services : https://techcommunity.microsoft.com/t5/Office- Retirement-Blog/Updating-the-Access-Services-in-SharePoint-Roadmap/ba- p/57148 ▪ We need to spend some time doing research before investing time to learn/explore new product/services 16
  • 17. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 17 SM @pgbhoyar #SharePointFestDC
  • 18. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 18 SM @pgbhoyar #SharePointFestDC Why We Should Care About Azure AD? ▪ Azure AD is the defacto authentication choice in the Microsoft World ▪ It is backbone of Office 365 and Azure and we should learn it or at least get familiar with it ▪ The name is misleading • Lot of developers think AD means IT Pro Stuff…☺ ▪ It is basically an authentication and authorization service provided as a subscription ▪ It enables Application developers to focus on building the applications 18
  • 19. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 19 SM @pgbhoyar #SharePointFestDC ▪ Only Azure Active Directory ▪ Less common ▪ Local Active Directory Synced with Azure AD ▪ Common ▪ Azure Active Directory Domain Services ▪ Domain Join Win 10 and Win 2016 machines 19 Source : https://docs.microsoft.com/en-us/azure/active-directory/active-directory-aadconnect Scenarios
  • 20. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 20 SM @pgbhoyar #SharePointFestDC Azure AD in the Enterprise ▪ Synced with on-premises users ▪ Enable SSO (Single Sign On) between many applications ▪ Can be used with any development platform ▪ Can be used instead of ASP.NET Identity Source :https://docs.com/OfficeDevPnP/4436/pnp-web-cast-what-should-every-sharepoint?fromAR=1
  • 21. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 21 SM @pgbhoyar #SharePointFestDC
  • 22. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 22 SM @pgbhoyar #SharePointFestDC Azure AD Pricing as of May 01st 2019 ☺ ▪ Comes in 5 editions • Free  Comes with Office 365, Azure subscription • Basic • Premium P1 • Premium P2 • Office 365 Apps 22 Source :https://azure.microsoft.com/en-us/pricing/details/active-directory/
  • 23. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 23 SM @pgbhoyar #SharePointFestDC Azure AD Pricing as of May 01st 2019 ☺ Features Free Basic Premiu m P1 Premiu m P2 Office 365 Apps Directory Objects 500,000 object limit No object limit No Object Limit No Object Limit No Object Limit Single Sign-On (SSO) 10 apps per user 10 apps per user No Limit No Limit 10 apps per user Join a device to Azure AD, Desktop SSO, Microsoft Passport for Azure AD, Administrator Bitlocker recovery Yes Yes Yes Yes Company Branding (Logon Pages/Access Panel customization) Yes Yes Yes Yes Multi-Factor Authentication Yes Yes Yes Pricing 1$ User/Month $6 User/Month $9 User/Month Source :https://azure.microsoft.com/en-us/pricing/details/active-directory/
  • 24. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 24 SM @pgbhoyar #SharePointFestDC Azure AD and Office 365 ▪ Every Office 365 tenant has Azure AD ▪ SharePoint Online Add-ins (AppRegNew.aspx) are enrolled in Azure AD • <SiteUrl>/_layouts/15/AppRegNew.aspx ▪ In Azure AD we can authorize web applications to access other tenant data ▪ Azure AD has much more user data ▪ The Microsoft Graph API • We need to get the access token from Azure AD first to make the call Source :
  • 25. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 25 SM @pgbhoyar #SharePointFestDC Azure AD and Office 365 Applications ▪ Azure AD stores custom application registration • Web or REST API • Native Application ▪ OpenID for Authentication and OAuth 2.0 for authorization ▪ Enforces authorization rules • Between applications and API • Out of the box registered API for Office 365 • Or Custom Implemented REST API Services
  • 26. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 26 SM @pgbhoyar #SharePointFestDC Microsoft Authentication Library (MSAL) ▪ SDK for gaining access to API protected by Microsoft identities • Fully OSS, easy to use, full-featured, production-ready • Works with Azure AD v2 (work & school accounts, personal accounts) and B2C ▪ Available on • .NET 4,5x, .NET Core, Xamarin (iOS, Android, UWP) • iOS (ObjC/Swift) • Android (Java) • Javascript ▪ SafariViewController on iOS, Chrome custom tabs on Android
  • 27. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 27 SM @pgbhoyar #SharePointFestDC MSAL PublicClientApplication myApp = new PublicClientApplication("a7d8cef0-4145-49b2-a91d-95c54051fa3f") string[] scopes = { "Mail.Read" }; AuthenticationResult rez = await myApp.AcquireTokenAsync(scopes);
  • 28. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 28 SM @pgbhoyar #SharePointFestDC Azure AD auth endpoints Work and school Personal with ADAL
  • 29. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 29 SM @pgbhoyar #SharePointFestDC App Registration v1.0 ▪ Any Application that uses Azure AD for authentication must be registered in Azure AD ▪ To register an App we need • Application ID URI  Identifier for application • Reply URL  Azure AD will do a redirect to this url after successful authentication • ClientID  Unique ID ( GUID) for application generated by Azure AD • Permissions  What access right does this App will have? Source :https://docs.microsoft.com/en-us/azure/active-directory/active-directory-integrating- applications
  • 30. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 30 SM @pgbhoyar #SharePointFestDC App registration v2.0 Create a new application https://apps.dev.microsoft.com A unique Id is created for your app Add app platform • Web App, SPA, Daemon • Native App • Web API (Office Add-in) Add permissions for admin consent flows • For delegated access for all users in the organization • For application access
  • 31. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 31 SM @pgbhoyar #SharePointFestDC App types and permissions Users can consent for their data or admin can consent for all users Only admin can consent Delegated permissions User privileges App permissions Permission type: applicationPermission type: delegated https://developer.microsoft.com/en-us/graph/docs/concepts/permissions_reference Get access on behalf of users Get access as a service Effective permissionEffective permission
  • 32. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 32 SM @pgbhoyar #SharePointFestDC Consent ▪ Users grant delegated permissions to apps via consent ▪ Consent prompts are shown at first token request time ▪ User consent is recorded individually ▪ Want to only prompt once per tenant? Admin consent
  • 33. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 33 SM @pgbhoyar #SharePointFestDC App vs User Permissions ▪ Web apps have their own identity • OAuth2 “confidential clients” ▪ Resources can expose application permissions ▪ Application permissions: • Are granted via admin consent • Once granted, they endow the app with the corresponding privilege
  • 34. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 34 SM @pgbhoyar #SharePointFestDC Modern authentication protocols ▪ OAuth 2.0 for delegation of access  Allows the user to consent (give permission) for one service to access the user’s data held by another service – Administrator can consent to access on the user’s behalf  Claims held in an access_token ▪ OpenID Connect  Adds authentication to OAuth 2.0  Claims held in a id_token ▪ JSON Web Token (JWT) mandated in OpenID Connect • Used in most OAuth 2.0 implementations
  • 35. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 35 SM @pgbhoyar #SharePointFestDC JWT - Lightweight
  • 36. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 36 SM @pgbhoyar #SharePointFestDC ▪ Authentication libraries available for most platforms • .NET OpenID Connect middleware for web applications • Active Directory Authentication Library (ADAL) for native and web apps  Connects to Azure AD v1 endpoints • Microsoft Authentication Library (MSAL) for native and web apps  Connects to v2 endpoints to authenticate users with a Microsoft or Azure AD account – v2 endpoints introduce new feature and do not currently support all the functionality of the v1 endpoints Development support
  • 37. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 37 SM @pgbhoyar #SharePointFestDC Asking for Consent ▪ Administrators can consent on behalf of all users Some consents need admin privileges
  • 38. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 38 SM @pgbhoyar #SharePointFestDC Auth access_token MSAL or ADAL YOUR APP Your Application id_token access_token refresh_toke n Microsoft Identity
  • 39. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 39 SM @pgbhoyar #SharePointFestDC Demo
  • 40. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 40 SM @pgbhoyar #SharePointFestDC ▪ Sign up for Office 365 Developer Program at http://dev.office.com/ ▪ Get 1 year of Office 365 subscription for free ▪ Excellent for personal development use ▪ 1 Month Trial ▪ https://products.office.com/en- us/business/compare-office-365- for-business-plans 40 How to get personal Office 365 Developer Tenant?
  • 41. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 41 SM @pgbhoyar #SharePointFestDC
  • 42. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 42 SM @pgbhoyar #SharePointFestDC 42 How to get personal Azure Subscription? ▪ If you have MSDN Enterprise subscription ▪ You can get $150/month Azure credits for free ▪ Sign Up for Free trial : https://azure.microsoft.com/ ▪ Credit Card is required ▪ Microsoft Imagine ▪ Former Dreamspark ▪ No credit card required ▪ Valid .edu account from participating school/institution ▪ Limited feature sets
  • 43. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 43 SM @pgbhoyar #SharePointFestDC Key Takeaways ▪ Hopefully the contents we covered today made you to explore Azure AD and you will go home and play with it ☺ ▪ Sign up for Developer Program using https://dev.office.com/ ▪ Check out Microsoft Graph APIs • https://developer.microsoft.com/en-us/graph/ ▪ Spend some time doing research before investing time to learn/explore new product/services
  • 44. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 44 SM @pgbhoyar #SharePointFestDC
  • 45. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 45 SM @pgbhoyar #SharePointFestDC Recap ▪ What is Azure Active Directory? ▪ Why we need to use/learn Azure AD? ▪ Azure AD in the Enterprise ▪ Azure AD in the Office 365 ▪ How to get started? ▪ Demos ▪ Key Takeaways 45
  • 46. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 46 SM @pgbhoyar #SharePointFestDC References Appendix/Resources Getting Started https://azure.microsoft.com/en-us/documentation/articles/active-directory-whatis/ https://azure.microsoft.com/en-us/documentation/articles/active-directory-developers-guide/ Pricing https://azure.microsoft.com/en-us/pricing/details/active-directory/
  • 47. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 47 SM @pgbhoyar #SharePointFestDC Q&A
  • 48. WithumSmith+Brown, PC | BE IN A POSITION OF STRENGTH 48 SM @pgbhoyar #SharePointFestDC Questions? Feedback? Contact me: ▪ Email: [email protected] ▪ Twitter: @PGBhoyar ▪ Blog: http://pgbhoyar.com ▪ LinkedIn: https://www.linkedin.com/in/pgbhoyar/ ▪ Slides :https://www.slideshare.net/pgbhoyar ▪ Free Consulting/ Q&A: https://pgbhoyar.com/free-question-answer-session/ ▪ Feedback : Please provide feedback ▪ Event App ▪ Email Thank You Organizers, Sponsors and You for Making this Possible.