.NET developer blog

Tag Archives for " client credentials "

Authenticate against azure ad using certificate in a client credentials flow

Published November 13, 2021 in .NET , .NET core , ASP.NET core , Azure , Azure Active Directory , OAuth2 , OpenID Connect , security

I have an API which needs to authenticate against azure ad to obtain an access token for calling another downstream API. When registering an application in azure AD for the caller API, I could either setup a shared secret or a certificate for the API to use as part of its credentials in a client credentials flow . In the past, I had always used a shared secret as it was more convenient and easier to setup. However, using certificate provides stronger security. After spending a few hours of googling and hacking, I was able to setup and use a certificate instead of a shared secret as credentials for the caller API to authenticate against azure AD.

Tags: Azure Key Vault , client credentials , digital certificate , digital signature , MSAL , self signed certificate , x509certificate

Migrating from Microsoft.AspNetCore.Authentication.AzureAD to Microsoft Identity Web authentication library to integrate with Azure AD.

Published September 6, 2021 in .NET core , ASP.NET core , Azure , Azure Active Directory , Azure ADB2C , OAuth2 , OpenID Connect , security

I recently had a chance to clean up some of the deprecated libraries I used for validating a JWT access token or obtain one via the client-credentials flow or the on-behalf-of flow. The libraries I used were under the Microsoft.AspNetCore.Authentication.AzureAD packages. Per the document, since ASP.NET core 5.0, users should use the Microsoft.Identity.Web package to integrate with Azure AD and Azure ADB2C.

Tags: azure ad , bearer token , client credentials , JWT , Microsoft Identity Platform , microsoft identity web , on behalf of