Modern Authentication with Azure Active Directory for Web Applications
Home > Computing and Information Technology > Operating systems > Microsoft (Windows) operating systems > Modern Authentication with Azure Active Directory for Web Applications: (Developer Reference)
Modern Authentication with Azure Active Directory for Web Applications: (Developer Reference)

Modern Authentication with Azure Active Directory for Web Applications: (Developer Reference)

|
     0     
5
4
3
2
1




Out of Stock


Notify me when this book is in stock
About the Book

Build advanced authentication solutions for any cloud or web environment Active Directory has been transformed to reflect the cloud revolution, modern protocols, and today’s newest SaaS paradigms. This is an authoritative, deep-dive guide to building Active Directory authentication solutions for these new environments. Author Vittorio Bertocci drove these technologies from initial concept to general availability, playing key roles in everything from technical design to documentation. In this book, he delivers comprehensive guidance for building complete solutions. For each app type, Bertocci presents high-level scenarios and quick implementation steps, illuminates key concepts in greater depth, and helps you refine your solution to improve performance and reliability. He helps you make sense of highly abstract architectural diagrams and nitty-gritty protocol and implementation details. This is the book for people motivated to become experts. Active Directory Program Manager Vittorio Bertocci shows you how to: Address authentication challenges in the cloud or on-premises Systematically protect apps with Azure AD and AD Federation Services Power sign-in flows with OpenID Connect, Azure AD, and AD libraries Make the most of OpenID Connect’s middleware and supporting classes Work with the Azure AD representation of apps and their relationships Provide fine-grained app access control via roles, groups, and permissions Consume and expose Web APIs protected by Azure AD Understand new authentication protocols without reading complex spec documents

Table of Contents:
Foreword     xi Introduction     xiii Chapter 1: Your first Active Directory app     1 The sample application     1 Prerequisites     1 Microsoft Azure subscription     2 Visual Studio 2015     2 Creating the application     3 Running the application.     4 ClaimsPrincipal: How .NET represents the caller     7 Summary     10 Chapter 2: Identity protocols and application types     11 Pre-claims authentication techniques     12 Passwords, profile stores, and individual applications     12 Domains, integrated authentication, and applications on an   intranet     14 Claims-based identity     17 Identity providers: DCs for the Internet     17 Tokens     18 Trust and claims     20 Claims-oriented protocols     20 Round-trip web apps, first-generation protocols     23 The problem of cross-domain single sign-on     23 SAML     25 WS-Federation     27 Modern apps, modern protocols     31 The rise of the programmable web and the problem of access delegation     32 OAuth2 and web applications     33 Layering web sign-in on OAuth     37 OpenID Connect     39 More API consumption scenarios     44 Single-page applications     45 Leveraging web investments in native clients     47 Summary     49 Chapter 3: Introducing Azure Active Directory and Active Directory Federation Services     51 Active Directory Federation Services     52 ADFS and development     53 Getting ADFS     54 Protocols support     55 Azure Active Directory: Identity as a service     56 Azure AD and development     60 Getting Azure Active Directory     61 Azure AD for developers: Components     63 Notable nondeveloper features     65 Summary     67 Chapter 4: Introducing the identity developer libraries     69 Token requestors and resource protectors     69 Token requestors     70 Resource protectors     73 Hybrids     74 The Azure AD libraries landscape     75 Token requestors     76 Resource protectors     81 Hybrids     85 Visual Studio integration     85 AD integration features in Visual Studio 2013     86 AD integration features in Visual Studio 2015     86 Summary     87 Chapter 5: Getting started with web sign-on and Active Directory     89 The web app you build in this chapter     89 Prerequisites     90 Steps     90 The starting project     90 NuGet packages references     92 Registering the app in Azure AD     93 OpenID Connect initialization code     95 Host the OWIN pipeline     95 Initialize the cookie and OpenID Connect middlewares     96 [Authorize], claims, and first run     97 Adding a trigger for authentication     97 Showing some claims     98 Running the app     99 Quick recap     99 Sign-in and sign-out     99 Sign-in logic     100 Sign-out logic     101 The sign-in and sign-out UI     102 Running the app     103 Using ADFS as an identity provider     103 Summary     105 Chapter 6: OpenID Connect and Azure AD web sign-on     107 The protocol and its specifications     107 OpenID Connect Core 1.0     108 OpenID Connect Discovery     108 OAuth 2.0 Multiple Response Type, OAuth2 Form Post Response Mode     109 OpenID Connection Session Management     109 Other OpenID Connect specifications     109 Supporting specifications     109 OpenID Connect exchanges signing in with Azure AD     110 Capturing a trace     110 Authentication request     113 Discovery     119 Authentication     122 Response     123 Sign-in sequence diagram     126 The ID token and the JWT format     127 OpenID Connect exchanges for signing out from the app and Azure AD     134 Summary     136 Chapter 7: The OWIN OpenID Connect middleware     137 OWIN and Katana     137 What is OWIN?     137 Katana     139 OpenID Connect middleware     155 OpenIdConnectAuthenticationOptions     155 Notifications     159 TokenValidationParameters     167 Valid values     168 Validation flags     169 Validators     169 Miscellany     170 More on sessions     171 Summary     172 Chapter 8: Azure Active Directory application model     173 The building blocks: Application and ServicePrincipal     174 The Application     177 The ServicePrincipal object     187 Consent and delegated permissions     189 Application created by a nonadmin user     189 Interlude: Delegated permissions to access the directory     192 Application requesting admin-level permissions     197 Admin consent     200 Application created by an admin user     204 Multitenancy     205 App user assignment, app permissions, and app roles     211 App user assignment     211 App roles     213 Application permissions     216 Groups     219 Summary     221 Chapter 9: Consuming and exposing a web API protected by Azure Active Directory     223 Consuming a web API from a web application     223 Redeeming an authorization code in the OpenID Connect hybrid flow     224 Using the access token for invoking a web API     232 Other ways of getting access tokens     251 Exposing a protected web API     253 Setting up a web API project     253 Handling web API calls     258 Exposing both a web UX and a web API from the same Visual Studio project     265 A web API calling another API: Flowing the identity of the caller and using “on behalf of”     266 Protecting a web API with ADFS “3”     271 Summary     272 Chapter 10: Active Directory Federation Services in Windows Server 2016 Technical Preview 3     273 Setup (for developers)     273 The new management UX     274 Web sign-on with OpenID Connect and ADFS     276 OpenID Connect middleware and ADFS     276 Setting up a web app in ADFS     277 Testing the web sign-on feature     280 Protecting a web API with ADFS and invoking it from a web app     281 Setting up a web API in ADFS     281 Code for obtaining an access token from ADFS and invoking a web API     285 Testing the web API invocation feature     288 Additional settings     289 Summary     292 Appendix: Further reading     293 Index     295


Best Sellers


Product Details
  • ISBN-13: 9780735698451
  • Publisher: Microsoft Press,U.S.
  • Publisher Imprint: Microsoft Press,U.S.
  • Language: English
  • Series Title: Developer Reference
  • ISBN-10: 0735698457
  • Publisher Date: 13 Dec 2015
  • Binding: Digital download
  • No of Pages: 336
  • Weight: 1 gr


Similar Products

Add Photo
Add Photo

Customer Reviews

REVIEWS      0     
Click Here To Be The First to Review this Product
Modern Authentication with Azure Active Directory for Web Applications: (Developer Reference)
Microsoft Press,U.S. -
Modern Authentication with Azure Active Directory for Web Applications: (Developer Reference)
Writing guidlines
We want to publish your review, so please:
  • keep your review on the product. Review's that defame author's character will be rejected.
  • Keep your review focused on the product.
  • Avoid writing about customer service. contact us instead if you have issue requiring immediate attention.
  • Refrain from mentioning competitors or the specific price you paid for the product.
  • Do not include any personally identifiable information, such as full names.

Modern Authentication with Azure Active Directory for Web Applications: (Developer Reference)

Required fields are marked with *

Review Title*
Review
    Add Photo Add up to 6 photos
    Would you recommend this product to a friend?
    Tag this Book Read more
    Does your review contain spoilers?
    What type of reader best describes you?
    I agree to the terms & conditions
    You may receive emails regarding this submission. Any emails will include the ability to opt-out of future communications.

    CUSTOMER RATINGS AND REVIEWS AND QUESTIONS AND ANSWERS TERMS OF USE

    These Terms of Use govern your conduct associated with the Customer Ratings and Reviews and/or Questions and Answers service offered by Bookswagon (the "CRR Service").


    By submitting any content to Bookswagon, you guarantee that:
    • You are the sole author and owner of the intellectual property rights in the content;
    • All "moral rights" that you may have in such content have been voluntarily waived by you;
    • All content that you post is accurate;
    • You are at least 13 years old;
    • Use of the content you supply does not violate these Terms of Use and will not cause injury to any person or entity.
    You further agree that you may not submit any content:
    • That is known by you to be false, inaccurate or misleading;
    • That infringes any third party's copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy;
    • That violates any law, statute, ordinance or regulation (including, but not limited to, those governing, consumer protection, unfair competition, anti-discrimination or false advertising);
    • That is, or may reasonably be considered to be, defamatory, libelous, hateful, racially or religiously biased or offensive, unlawfully threatening or unlawfully harassing to any individual, partnership or corporation;
    • For which you were compensated or granted any consideration by any unapproved third party;
    • That includes any information that references other websites, addresses, email addresses, contact information or phone numbers;
    • That contains any computer viruses, worms or other potentially damaging computer programs or files.
    You agree to indemnify and hold Bookswagon (and its officers, directors, agents, subsidiaries, joint ventures, employees and third-party service providers, including but not limited to Bazaarvoice, Inc.), harmless from all claims, demands, and damages (actual and consequential) of every kind and nature, known and unknown including reasonable attorneys' fees, arising out of a breach of your representations and warranties set forth above, or your violation of any law or the rights of a third party.


    For any content that you submit, you grant Bookswagon a perpetual, irrevocable, royalty-free, transferable right and license to use, copy, modify, delete in its entirety, adapt, publish, translate, create derivative works from and/or sell, transfer, and/or distribute such content and/or incorporate such content into any form, medium or technology throughout the world without compensation to you. Additionally,  Bookswagon may transfer or share any personal information that you submit with its third-party service providers, including but not limited to Bazaarvoice, Inc. in accordance with  Privacy Policy


    All content that you submit may be used at Bookswagon's sole discretion. Bookswagon reserves the right to change, condense, withhold publication, remove or delete any content on Bookswagon's website that Bookswagon deems, in its sole discretion, to violate the content guidelines or any other provision of these Terms of Use.  Bookswagon does not guarantee that you will have any recourse through Bookswagon to edit or delete any content you have submitted. Ratings and written comments are generally posted within two to four business days. However, Bookswagon reserves the right to remove or to refuse to post any submission to the extent authorized by law. You acknowledge that you, not Bookswagon, are responsible for the contents of your submission. None of the content that you submit shall be subject to any obligation of confidence on the part of Bookswagon, its agents, subsidiaries, affiliates, partners or third party service providers (including but not limited to Bazaarvoice, Inc.)and their respective directors, officers and employees.

    Accept

    New Arrivals

    Inspired by your browsing history


    Your review has been submitted!

    You've already reviewed this product!