API & Web Project Authentication with Azure Active Directory

Learn how to secure your APIs and web projects using Azure Active Directory (Azure AD) authentication in this comprehensive course. We'll explore Single Tenant Authentication – the most common approach – and understand how the concepts extend to Multi Tenant Authentication. You'll also gain practical experience accessing APIs with Postman.

Understanding Single Tenant vs. Multi Tenant

• Single-tenant apps are restricted to the tenant where they're registered (your "home tenant").
• Multi-tenant apps are accessible to users across multiple tenants.

Prerequisites:

• Visual Studio 2019
• An Azure Subscription (even a disabled account is sufficient for a free 12-month trial of Azure AD).

Benefits of Single Tenant Authentication:

• Simplified Programming Model: Easier to implement and manage.
• Effortless App Management: Streamlined control over your application.
• Enhanced Security: Prevents unauthorized external user access.
• No Service Principal Provisioning: Reduces administrative overhead.
• Ideal for Smaller User Bases.

Key Features Covered:

• Work in Azure AD: A central hub for managing identities.
• Application Management: Control and monitor your applications.
• Authentication: Securely verify user identities.
  • B2B Authentication: Manage guest users and external partners while protecting your corporate data.
  • B2C Authentication: Customize the user experience for sign-up, sign-in, and profile management.
• Conditional Access: Enforce security policies based on user, location, and device.
• Domain Services: Manage your on-premises Active Directory with Azure AD.
• Hybrid Identity: Integrate your on-premises and cloud identities.
• Identity Governance: Establish and enforce identity policies.
• Identity Protection: Detect and respond to identity-based risks.
• Managed Identities for Azure Resources: Securely authenticate Azure resources to other Azure services without managing credentials.
• Privileged Identity Management (PIM): Grant just-in-time access to privileged roles.
• Reports and Monitoring: Track authentication activity and security events.