Tag Archives: Client credentials

Implementing secure Microsoft Graph application clients in ASP.NET Core

January 16, 2023 · by · in .NET, .NET Core, App Service, ASP.NET Core, Azure · 4 Comments

The article looks at the different way a Microsoft Graph application client can be implemented and secured in an ASP.NET Core application or a .NET application. This type of client is intended for applications or application logic where no user is involved. Code: https://github.com/damienbod/MicrosoftGraphAppToAppSecurity Accessing Microsoft Graph can be initialized for app-to-app (application permissions) security […]

Setup application client in Azure App Registration with App roles to use a web API

September 12, 2022 · by · in .NET Core, App Service, ASP.NET Core, Azure, Azure AD · 2 Comments

In Azure AD, a client application with no user (daemon client) which uses an access token to access an API protected with Microsoft Identity needs to use an Azure API Registration with App Roles. Scopes are used for delegated flows (with a User and a UI login). This is Azure AD specific not OAuth2. This […]

Debug Logging Microsoft.Identity.Client and the MSAL OAuth client credentials flow

August 8, 2022 · by · in .NET Core, ASP.NET Core, Azure, Azure AD, Azure B2C, Azure Key Vault, OAuth2, Security · 1 Comment

This post shows how to add debug logging to the Microsoft.Identity.Client MSAL client which is used to implement an OAuth2 client credentials flow using a client assertion. The client uses the MSAL nuget package. PII logging was activated and the HttpClient was replaced to log all HTTP requests and responses from the MSAL package. Code: […]

Implementing OAuth2 APP to APP security using Azure AD from a Web APP

March 28, 2022 · by · in .NET Core, ASP.NET Core, Azure, Azure AD, Azure B2C, OAuth2, Security · 4 Comments

This article shows how to implement an API service and client in separate ASP.NET Core applications which are secured using Azure application permissions implemented in an Azure App registration. The OAuth client credentials flow is used to get an access token to access the API. Microsoft.Identity.Web is used to implement the client credentials (CC) flow. […]

Using Azure security groups in ASP.NET Core with an Azure B2C Identity Provider

September 6, 2021 · by · in .NET, .NET Core, ASP.NET Core, Azure B2C · 4 Comments

This article shows how to implement authorization in an ASP.NET Core application which uses Azure security groups for the user definitions and Azure B2C to authenticate. Microsoft Graph API is used to access the Azure group definitions for the signed in user. The client credentials flow is used to authorize the Graph API client with […]

Getting started with Self Sovereign Identity SSI

March 29, 2021 · by · in blockchain, Security, Self Sovereign Identity · 8 Comments

The blog is my getting started with Self Sovereign identity. I plan to explore developing solutions using Self Sovereign Identities, the different services and evaluate some of the user cases in the next couple of blogs. Some of the definitions are explained, but mainly it is a list of resources, links for getting started. I’m […]

Implement Azure AD Client credentials flow using Client Certificates for service APIs

October 1, 2020 · by · in App Service, ASP.NET Core, ASPNET5, Azure Key Vault · 6 Comments

This post shows how to implement an Azure client credential flows to access an API for a service-to-service connection. No user is involved in this flow. A client certificate (Private Key JWT authentication) is used to get the access token and the token is used to access the API which is then used and validated […]