Application Authentication using Azure AD

Who am I? Ashish Gupta .NET Developer by background Currently working as an Identity and Access Management Architect/Developer for LPL Financial, Charlotte Contact :- Email : ashishmgupta@hotmail.com Website : http://guptaashish.com Twitter : @ashishrocks

Agenda Authentication/Authorization Authentication techniques Basic Authentication techniques SAML, WS-Federation OAuth Open ID Connect Azure AD Overview Authentication using Azure AD

Back to basics Popular Authentication Techniques Pre-claims authentication techniques Passwords Domain authentication Claim-based identity SAML, WS-Federation OAuth, OpenID-Connect

Pre-claims Auth techniques Passwords Application specific – Not meant for the multi application access.

Pre-claims Auth techniques Domain Authentication Works well within the enterprise – but not outside.

Claim-based Auth Techniques High level Analogy Process of Boarding a plane Sign-On Protocol : Go to a check-in kiosk > print the boarding pass >TSA line > Boarding gate > Board the plane Authentication Protocol The passport/driver license Token The boarding pass WS-Federation Storing passwords? Read this :- http://bit.ly/1UpSOq5

Claim-based Auth Techniques SAML Enables an application to send Auth requests and obtain tokens that can be sent across domains SAML was introduced in year 2000. It uses SAML token which is XML format, very expressive but very verbose. SaaS vendors are more likely to support it than WS-Federation.  On the other hand, if you are in a mostly Microsoft world, WS-Federation is more ubiquitous.  URL of the image : https://documentation.pingidentity.com/display/PF66/SP-Initiated+SSO--POST-POST

Claim-based Auth Techniques WS-Federation Enables an application to send Auth requests and obtain tokens that can be sent across domains WS-Fed supports SAML tokens as well as the JWT. SAML protocol supports only SAML tokens. URL for the image : https://documentation.pingidentity.com/display/PF70/WS-Federation

Claim-based Auth Techniques Oauth 2.0 Authorization Protocol

Claim-based Auth Techniques Open ID Connect Oauth 2.0 + Authentication

Azure AD – An overview Identity and Access Management as a service (IDaaS) Identifies Apps, APIs and users using internet ready standards OpenID-Connect, WS-Fed Its free!! And free version is very capable. Up to about ½ million users authentication is supported. https://azure.microsoft.com/en-us/documentation/infographics/azure/

Thank you Questions?