Paths
Securing Applications and APIs with the Microsoft Identity Platform
The Microsoft Identity Platform gives you the tools necessary to build solutions and applications that both customers and users can securely sign in to. This skill path will teach... Read more
What You Will Learn
- How developers can get started with Azure Active Directory
- How to protect JavaScript single page applications with Azure Active Directory
- How to protect web applications and APIs with Azure Active Directory
- How to protect daemons and services with Azure Active Directory
- How to protect mobile applications with Azure Active Directory
- How to build authorization in Azure Active Directory
- How to develop Azure Active Directory B2C applications
Pre-requisites
This path is intended for developers who are already familiar with the Azure portal and expects learners to be familiar with Azure administration and development.
Beginner
The course in this section of the path will teach you the essentials you need to gain a foundational knowledge in Azure Active Directory for developers. After taking this course, you should have the knowledge necessary to start building authentication and authorization into the solutions you're building.
Getting Started with Azure Active Directory for Developers
2h 15m
Description
As a developer connected to the Microsoft ecosystem, learning Azure Active Directory is essential. In this course, Getting Started with Azure Active Directory for Developers, you’ll learn to provision, manage and use Azure Active Directory. First, you’ll explore the basic process of creating an Azure AD, its relationship with subscriptions, and managing permissions and roles in AAD. Next, you’ll discover the ins and outs of service principals and app registrations, and the essential concepts of OAuth2 and OpenID connect. Finally, you’ll learn how to manage Azure AD through the portal, Azure CLI, and Powershell. When you’re finished with this course, you’ll have the skills and knowledge of Azure Active Directory needed to provision and administer apps, service principals, and a clear understanding of modern authentication principals.
Table of contents
- Course Overview
- An Introduction to Azure Active Directory
- Modern Authentication Basics
- Service Principals
- Azure AD Application Registrations
- Manage Azure AD from Terminal
Intermediate
The courses in this section of the path teach you how to protect a variety of different applications and solutions using Azure Active Directory. You'll learn about JavaScript single page applications, mobile applications, web applications, Web APIs, daemons and other services.
Developing JavaScript Single Page Applications Protected by Azure Active Directory
1h 14m
Description
Once your app is available to the public, you need to make sure that users with bad intentions are securely restricted from accessing your resources. One way is to secure your apps by requiring users to be authenticated and authorized. In this course, Developing JavaScript Single Page Applications Protected by Azure Active Directory, you’ll learn to access secured APIs from a plain JavaScript, Angular and React app. First, you’ll explore how to use a plain JavaScript app to access a secured API. Next, you’ll discover how to use an Angular app to access an API that is secured with AAD. Finally, you’ll understand how to use a React app to access an API that is secured with AAD. When you’re finished with this course, you’ll have the skills and knowledge needed to securely access API EndPoints secured by Azure Active Directory.
Table of contents
- Course Overview
- Securing Your Web API Using Azure Active Directory
- Consume ADD Protected APIs from JavaScript Apps
- Consume ADD Protected APIs from Angular Apps
- Consume ADD Protected APIs from React Apps
Developing Daemons and Services Protected by Azure Active Directory
1h 31m
Description
Headless processes commonly referred to as daemons or services have no opportunity to present an authentication user interface. Yet they must be able to access Azure AD protected resources. In this course, Developing Daemons and Services Protected by Azure Active Directory, you’ll learn to securely call Azure AD protected APIs from headless processes. First, you’ll explore the flows available to headless applications and the basics of service principals. Next, you’ll discover how to perform client credential flow with both REST or APIs on .NET, NodeJS and Python. Finally, you’ll learn how to master managed identities when working in Azure. When you’re finished with this course, you’ll have the skills and knowledge of the various facilities Azure AD offers needed to author headless applications that need to call secure APIs in Azure.
Table of contents
- Course Overview
- Headless applications and Azure AD
- Client Credential Flow
- Daemons with Managed Identities
Developing Web Applications and Web APIs Protected by Azure Active Directory
2h 26m
Description
A large percentage of applications are accessed via the browser. The rest of them usually call a REST API. If you wish to secure either using Azure AD, this course is for you. In this course, Developing Web Applications and Web APIs Protected by Azure Active Directory, you’ll learn to secure Web applications and Web APIs using Azure AD. First, you’ll explore protecting Web Apps for user logins. Next, you’ll discover how to secure Web APIs callable from any modern auth client. Finally, you’ll learn how to forward user identity and concepts such as scopes, and consents. When you’re finished with this course, you’ll have the skills and knowledge of securing Web APIs and Web Apps needed to applications secured by modern authentication protocols using Azure AD.
Table of contents
- Course Overview
- Secure Web Applications
- Secure Web APIs
- Scopes and Consent
- Forwarding Identity and on Behalf of Flow
Developing Mobile Applications Protected by Azure Active Directory
1h 15m
Description
Authenticating users is essential to mobile applications, and for the sake of your users it needed to be implemented right, but it’s difficult to know where to get started. In this course, Developing Mobile Applications Protected by Azure Active Directory, you’ll learn to harness the power and infrastructure of Azure AD to provide your users and mobile apps with a secure sign-in experience. First, you’ll explore how to configure Azure AD to work with your mobile app. Next, you’ll discover how users can sign-in to your mobile application to access secure resources in a custom web API. Finally, you’ll learn how to query the Microsoft Graph to obtain information about your users contained within Azure AD. When you’re finished with this course, you’ll have the skills and knowledge of authenticating mobile apps with Azure AD needed to provide your users with a secure experience.
Table of contents
- Course Overview
- Understanding Azure Active Directory Mobile Applications
- Authenticating with Mobile Apps
- Microsoft Graph Fundamentals
- Using Microsoft Graph with a Mobile App
- Brokered Authentication
- Implementing Native Logins with Azure AD
Advanced
The courses in this section of the path focus on the more advanced topics of the Microsoft Identity Platform, including building authorization and developing B2C apps. After taking these courses in conjunction with the others in the path, you'll be equipped with the tools and knowledge necessary to integrate Azure Active Directory into any of the solutions you are building.
Building Authorization in Azure Active Directory for Developers
1h 21m
Description
Authentication is just part of the story, what can you do, once we know who you are, is authorization, a rather weedier topic. In this course, Building Authorization in Azure Active Directory for Developers, you’ll learn to build authorization your AAD protected applications. First, you’ll explore RBAC based authorization and it’s limits. Next, you’ll discover scope based authorization. Finally, you’ll learn how to use custom claims. When you’re finished with this course, you’ll have the skills and knowledge of effectively building authorization needed to build real world enterprise applications.
Table of contents
- Course Overview
- What Is Authorization?
- RBAC Based Authorization
- Scope Based Authorization
- Custom Claims Based Authorization
Developing Azure Active Directory B2C Applications
2h 4m
Description
Azure AD Business-to-Consumers (B2C) allows anybody to create, and manage, accounts for your applications. In this course, Developing Active Directory B2C Applications, you’ll learn to how to manage consumer identities with Azure AD B2C. First, you’ll explore setting up and configuring Azure AD B2C. Next, you’ll discover how to enable your applications to allow anybody to sign-up/sign-in, customize that experience, and protect back-end resources. Finally, you’ll learn how to manage your user’s identities using Microsoft Graph and Application Insights. When you’re finished with this course, you’ll have the skills and knowledge of Azure AD B2C needed to allow anybody to sign-in to your applications and then manage those users.
Table of contents
- Course Overview
- Configure Azure Active Directory B2C
- Building and Testing User Flows
- Authenticate Web Application with Azure Active Directory B2C
- Implement Azure Active Directory B2C Custom Policies
- Advanced Azure AD Custom Policies
- Integrate Azure AD B2C with AAD and Microsoft Graph
- Manage User Data in Azure Active Directory B2C Using Application Insights