Monthly Archives: March 2025

ASP.NET Core delegated Microsoft OBO access token management (Entra only)

March 25, 2025 · by · in .NET, .NET Core, App Service, Azure, dotnet, Microsoft Entra ID, OAuth2, Security · 1 Comment

This blog shows how to implement a delegated Microsoft On-Behalf-Of flow in ASP.NET Core, and has a focus on access token management. The solution uses Microsoft.Identity.Web to implement the different flows and it really simple to implement, when you know how to use the Nuget package and use the correct Microsoft documentation. The application can […]

Implement Phone verification, 2FA using ASP.NET Core Identity

March 3, 2025 · by · in .NET, .NET Core, ASP.NET Core · 2 Comments

This post shows how to implement phone (SMS) verification and two-factor authentication (2FA) using ASP.NET Core Identity. The solution integrates phone-based verification and 2FA mechanisms. The implementation uses ASP.NET Core Identity’s extensibility to incorporate SMS-based verification during user registration and login processes. SMS is no longer a recommended authentication method due to security risks but […]