50 years — from punch cards to CopilotFifty years ago today, I started my career in IT. I was in my second year of university, and my parents lived in Malawi, which had exchange control, so they could only send me K30 a month, which didn’t cover much! Obviously, it went a lot further… Jan 31 24January 31, 2024Article at Medium
List of @azuread deprecation announcements. Azure AD Graph API will not retire on June 30, 2022. ADAL end of life is extended to December 2022. - techcommunity.microsoft.com/t5/azure-activ… Mar 02 22March 02, 2022Post at @rbrayb
Tips and tricks for working with custom policies in Azure AD B2CI’ve been doing a lot of work with custom policies lately and came across a number of things that might help other custom policy developers so I thought it worth while to note them. This article will be updated as I come across other tips and tricks.… Nov 11 21November 11, 2021Article at Medium
ADAL to MSAL migration for the Azure AD B2C “B2CGraphClient” utilityAs most of you know, ADAL is being deprecated. “Starting June 30th, 2020, we will no longer add new features to ADAL. We’ll continue adding critical security fixes to ADAL until June 30th, 2022. After this date, your apps using ADAL will continue to… Jul 28 21July 28, 2021Article at Medium
The @azuread monitoring workbook can help you find applications that use ADAL. Then move them to MSAL 😀- techcommunity.microsoft.com/t5/azure-activ… Jun 21 21June 21, 2021Post at @rbrayb
Just published "ADAL to MSAL migration for the Azure AD B2C “B2CGraphClient” utility" - medium.com/the-new-contro… Apr 13 21April 13, 2021Post at @rbrayb
Authenticating to Active Directory Federation Services (ADFS) 2019 with .NET Core 3.1Googling this shows only one sample and that sample uses WS-Federation not OpenID Connect (OIDC)! There doesn’t appear to be anything else and you can’t use the usual ADAL / MSAL libraries because there aren’t .NET Core versions yet. (There are… Oct 08 20October 08, 2020Article at Medium
Starting June 30th, 2020, no new features for ADAL and @azuread Graph. Starting June 30th 2022, end of support for ADAL and Azure AD Graph and no more security updates. So start planning to update your applications using MSAL and Microsoft Graph. Jun 23 20June 23, 2020Post at @rbrayb
Validating an ADFS JWTThis applies to ADFS 4.0 (Server 2016) and upwards. I ‘m often asked how to validate a JWT, particularly in the context of OpenID Connect / OAuth on ADFS. Normally this is all part of the ADAL / MSAL stack but people are curious as to how it works… Jul 24 19July 24, 2019Article at Medium
MSAL.NET 4.0 has been released. This has support for ADFS 2019. However, it does not support a direct connection to ADFS 2016 or ADFS v2 (which are not OIDC compliant). To do this, you keep using ADAL - github.com/AzureAD/micros… Jun 05 19June 05, 2019Post at @rbrayb
ADFS : MSIS9642: The request cannot be completedThis is for Server 2016 (ADFS 4.0). The full error is: MSIS9642: The request cannot be completed because an id token is required but the server was unable to construct an id token for the current user. You only get this error if you are using OpenID… Feb 14 18February 14, 2018Article at nzpcmad.blogspot.com
Connecting ADFS to a Cordova applicationI’ve assisted with a lot of integrations with ADFS and ADAL e.g. Android, command line, WPF etc. but then I was asked about Cordova. This was one technology I wasn’t familiar with but to quote Vittorio: “ Apache Cordova is a set of device APIs that… Jan 11 18January 11, 2018Article at Medium
Azure Active Directory’s hidden feature — Easy AuthImagine you have e.g. an ASP.NET MVC application running on App Services in Azure. All well and good but now you decide that this application is not open. You only want to allow users that are in your Azure AD tenant to access it. In other words,… Dec 11 17December 11, 2017Article at Medium
ADFS : ADFS 4.0 with SPAThis is for Server 2016 with a single page application. There is a sample that shows how to do this but you will see many comments along the lines of "I can authenticate but when I call the API I get "Authorization has been denied for this request"… Nov 15 17November 15, 2017Article at nzpcmad.blogspot.com
Azure Active Directory’s hidden feature — Easy AuthImagine you have e.g. an ASP.NET MVC application running on App Services in Azure. All well and good but now you decide that this application is not open. You only want to allow users that are in your Azure AD tenant to access it. In other words,… May 09 17May 09, 2017Article at Medium
ADFS : Using the client_credentials flow with ADFS 4.0 returns 401Been battling with this for ages. I'm using ADFS 4.0 on Server 2016. My web site uses OpenID Connect and that uses the OWIN authorisation code grant. When I use the authorisation code grant, I can get the code, exchange the code for an access token… Mar 15 17March 15, 2017Article at nzpcmad.blogspot.com
AAD : The V2.0 endpointsI've been helping a few people lately with this and I see the same few issues that continually trip people up. Table to help decide whether to use the v2.0 endpoints or not. And note that currently the "Resource owner password credentials" grant is… Dec 22 16December 22, 2016Article at nzpcmad.blogspot.com
Postman : Azure AD and Implicit FlowI've been playing around with this and thought it would be worthwhile to document the journey. I have a web application in Azure AD and this application calls a web API. The web application has permission to call the web API. I want to use the… Aug 31 16August 31, 2016Article at nzpcmad.blogspot.com
ADFS : Daemon and Web API on Server 2016 TP4 ADFS 4.0This follows on from my previous series of posts around taking the Azure AD OpenID Connect / OAuth2 samples and getting them to run on ADFS on TP4. This uses the active-directory-dotnet-daemon sample that has a Windows console application calling a… Apr 28 16April 28, 2016Article at nzpcmad.blogspot.com
ADAL : Use of token cache in Azure multi-tenancyVery good Patterns and Practices series of posts here on developing an Azure multi-tenant application. Part of this is the issue around caching the tokens. The article has this to say: "It's relatively expensive to get an OAuth access token, because… Apr 15 16April 15, 2016Article at nzpcmad.blogspot.com
