Azure AD posts

Azure AD Authentication in ASP.NET Core APIs part 1: Basic setup, checking scopes, creating a test client

Posted on: 12-06-2018

This first part looks at the basic setup for Azure AD authentication in an ASP.NET Core API as well as creating a test client app

Azure AD Authentication with Azure Storage + Managed Service Identity

Posted on: 24-05-2018

Getting rid of access keys and instead using Azure AD with Managed Service Identity to access Azure Storage

Calling your APIs with Azure AD Managed Service Identity using application permissions

Posted on: 24-04-2018

Walkthrough on configuring API access for Azure App Service using Azure AD MSI.

Adding an opt-in feature to an Azure AD v1 app in a good way

Posted on: 18-04-2018

Opt-in features can be a bit hard to implement with Azure AD. Here we look at an example of doing that for an optional calendar integration.

Azure AD v2 and MSAL from a developer's point of view

Posted on: 10-04-2018

Introduction to the new Azure AD v2 endpoint and its capabilities

Azure AD Multi-tenant Apps: API Chains and Cyclic Dependencies

Posted on: 17-03-2018

Explores some special scenarios where you have a multi-tenant app that is composed of multiple parts. First the "API Chain" scenario, and second a scenario where two apps require access to each other.

ASP.NET Core + Azure Key Vault + Azure AD MSI = Awesome way to do config

Posted on: 06-03-2018

Looks at an example for storing sensitive configuration in Azure Key Vault, and connecting it to the ASP.NET Core configuration pipeline.

How Device Code Flow works in Azure AD

Posted on: 27-02-2018

In-depth walkthrough on the device code authentication flow which can be used by browserless and input-limited devices.

Using Azure AD On-Behalf-Of flow in an ASP.NET Core 2.0 API

Posted on: 06-01-2018

How to call another Azure AD protected API from an API as the user calling it.

AADSTS90094: The grant requires admin permission, how to fix it and why it happens

Posted on: 09-12-2017

How to grant administrator consent for permissions in Azure AD, and some technical details on what exactly it is that Azure AD expected to find before showing this error.

Hi! My name is Joonas Westlin, I'm a software developer who blogs about ASP.NET, Azure, and Web development.

Azure MVP, MCT, MCSE: Cloud Platform and Infrastructure, MCSD: App Builder