Summary

This chapter explored some of the key tools and features available to make building applications with authentication and authorization easier. You started with a detailed introduction to the Microsoft identity platform, which included explanations of app registrations and service principals, followed by the different permission types and consent types, finishing with a demonstration of using conditional access to limit access to an application via a service principal.

Building on this, you looked at using the Microsoft Authentication Library to handle authentication and to handle tokens in code. After exploring Graph Explorer and the structure of Graph REST API requests, you created an app that obtained a token and used the token to query Microsoft Graph using one of the Graph SDKs. The final topic of this chapter looked at how SASs can provide defined access to specific resources within a storage account, including using stored access policies for greater security and flexibility...