Demystifying Azure AD, JWTs & OIDC - Graeme Foster - NDC Melbourne 2022

OIDC and OAuth2 have been the goto for authentication and authorisation Azure Active Directory for years now. But when things start to go wrong, it can all become a bit of a black-box with no obvious place to look for help.
In this live-code session I will uncover some common errors I see when setting up applications to work with AAD, and dive that next level down to give you an understanding of why they occur, and how to fix them.
By the end of the session you'll understand
- What an AAD Application is,
- What an AAD Service Principal is,
- MSAL vs ADAL
- The difference between AAD V1 and V2 endpoints
- How AAD represents OAuth2 scopes,
- Why scopes aren't permissions, and how roles can help
Check out more of our featured speakers and talks at
www.ndcconferences.com
ndcmelbourne.com/

[@benoitbourque344]

This presentation is so good! Thank you for sharing brother!

[@dandoescode]

Excellent talk Graeme. Definitely clears up a lot of confusion about the intended use of scopes and the myriad of names for a service principle. Cheers!

[@chrismckelt]

Great talk Graeme 👍

[@mohammadjaberaldroubi7974]

It's really hard to see what he is presenting