Azure AD posts

Calling your APIs with Azure AD Managed Service Identity using application permissions

Posted on: 24-04-2018

Walkthrough on configuring API access for Azure App Service using Azure AD MSI.

Adding an opt-in feature to an Azure AD v1 app in a good way

Posted on: 18-04-2018

Opt-in features can be a bit hard to implement with Azure AD. Here we look at an example of doing that for an optional calendar integration.

Azure AD v2 and MSAL from a developer's point of view

Posted on: 10-04-2018

Introduction to the new Azure AD v2 endpoint and its capabilities

Azure AD Multi-tenant Apps: API Chains and Cyclic Dependencies

Posted on: 17-03-2018

Explores some special scenarios where you have a multi-tenant app that is composed of multiple parts. First the "API Chain" scenario, and second a scenario where two apps require access to each other.

ASP.NET Core + Azure Key Vault + Azure AD MSI = Awesome way to do config

Posted on: 06-03-2018

Looks at an example for storing sensitive configuration in Azure Key Vault, and connecting it to the ASP.NET Core configuration pipeline.

How Device Code Flow works in Azure AD

Posted on: 27-02-2018

In-depth walkthrough on the device code authentication flow which can be used by browserless and input-limited devices.

Using Azure AD On-Behalf-Of flow in an ASP.NET Core 2.0 API

Posted on: 06-01-2018

How to call another Azure AD protected API from an API as the user calling it.

AADSTS90094: The grant requires admin permission, how to fix it and why it happens

Posted on: 09-12-2017

How to grant administrator consent for permissions in Azure AD, and some technical details on what exactly it is that Azure AD expected to find before showing this error.

Defining permission scopes and roles offered by an app in Azure AD

Posted on: 03-12-2017

How you can define delegated and app permissions offered by your API, as well as how to assign roles within an app to users.

Azure AD Managed Service Identity

Posted on: 13-10-2017

Walkthrough on how to use the new Managed Service Identity service in Azure to easily authenticate against services with no credentials stored within the app.

Hi! My name is Joonas Westlin, I'm a software developer who blogs about ASP.NET Core, Azure, and Web development.

Azure MVP, Azure Solutions Architect Expert, Azure Security Engineer Associate, Azure Developer Associate.