Explore how to secure three-tier architecture with Microsoft Entra ID in this first part of a three-part series. Learn how to implement robust authentication and authorization across client app, API, and data layers, ensuring secure and reliable application design in an Azure cloud environment.
Streamline the integration of custom claims into authentication tokens with the new Authentication Events NuGet library. This blog post introduces a NuGet library that simplifies the implementation of custom claims providers, reducing the need for extensive code and minimizing validation errors. Learn how to efficiently fetch and add custom data, l...
Explore the differences between access tokens and ID tokens and how to use them securely in your applications. This blog post explains why access tokens should be treated as opaque by client apps, and offers best practices for secure token handling.
Unlock the potential of secure and efficient identity management with Microsoft Entra External ID. Focusing on two key scenarios, we show how External ID simplifies the process of managing external identities, including business partners, consumers, and customers. Dive in to discover how you can streamline identity management with straightforward, ...
Discover an exciting new plugin in the Chat Copilot sample app from the Semantic Kernel team. This plugin lets an AI Agent call Microsoft Graph APIs secured by Microsoft Entra ID using the On-Behalf-Of (OBO) flow.
Building on the foundations laid out in an earlier blog post on IAM basics, this blog post dives into the world of application types and authentication flows.
Explore the differences between authentication and authorization and when to choose a coupled or decoupled AuthN and AuthZ using Microsoft Entra External ID and Cerbos, in part one of our three-part series.
Explore the essentials of identity and access management (IAM) in our latest blog post, covering key concepts, digital identity, authentication and authorization, the role of identity providers, and more.
This is part two of a three-part series of blog posts. In part one, published in Sept 2023, we talked about the drivers and the need for machine identities. Now, we take a look at the building blocks of a machine identity management system.
IT admins can leverage managed devices to minimize the impact of blocked third-party cookies on the user experience.
