4/15/2019 1:57 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Building Web solutions with authentication 4/15/2019 1:57 PM Building Web solutions with authentication Jean-Marc Prieur (@jm_prieur) Principal Program Manager Microsoft Identity Developer Experience © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Agenda Introduction Why enable sign in, in Web Apps? 4/15/2019 1:57 PM Agenda Introduction Why enable sign in, in Web Apps? What happens when a user signs-in ? Demo – What code does the magic ? Resources and next steps Introduction Why enable sign in in Web Apps? Demo - What is the user experience ? Demo – How ? What’s the code that does the magic ? Register the AAD application Variations Resources and next steps © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Introduction Sign in users to a Web Application 4/15/2019 1:57 PM Introduction Sign in users to a Web Application with work and school accounts or their Microsoft personal accounts (MSA) This uses auth standards (OpenID Connect) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/15/2019 1:57 PM Why sign-in users? Restrict access (for instance, users in my organization) Offer a customized experience Preliminary step to calling Web APIs in the name of the user Microsoft Graph Web app © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What happens when a user signs-in ? 4/15/2019 1:57 PM What happens when a user signs-in ? Authentication is delegated to Azure AD This requests the Web App to be registered with Azure AD (Client ID / App ID) Delegates sign-in sign-in Calls back with ID Web app © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demos What code does the magic? 4/15/2019 1:57 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Recap New changed 4/15/2019 1:57 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Resources and next steps 4/15/2019 1:57 PM Resources and next steps Samples Acquire a token to call an API in the name of the user https://github.com/Azure-Samples/active-directory-aspnetcore-webapp-openidconnect-v2 Call the Microsoft Graph from a Web API https://github.com/microsoftgraph/aspnetcore-connect-sample Documentation: https://aka.ms/aadv2 Get help: https://aka.ms/devexhelpsupport © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/15/2019 1:57 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.