Rory Braybrook

Using Verified ID with Entra External ID (EEID) The docs are here. The repo is here. You can find my previous VI posts here. You’ll find the VI tab in the EEID portal here: For the quick start, you …

Using the Entra ID Agentic ID sample The repo is here. “This repository contains samples demonstrating how to use Agent Identities in Microsoft Entra ID with .NET. Agent Identities enable AI agents …

On Entra External ID (EEID) federation with Entra ID Questions around this particular federation are among the most popular on Q&A. I was asked how to allow a customer to use their existing Entra ID …

Customising your Password Reset emails with the “Email Otp Send” custom authentication extension in Entra External ID (EEID) The docs. are here. See also my previous post on custom authentication …

Augmenting sign-up attributes with the Attribute Collection Submit custom authentication extension in Entra External ID (EEID) The docs. are here. See my previous post on custom emails. We will mock …

Augmenting sign-up attributes with the “Attribute Collection Start” custom authentication extension in Entra External ID (EEID) The docs. are here. See my previous post on custom emails. We will …

I covered employee onboarding here. Read that post first, as it has a lot of background that I am not going to repeat. We need two Entra ID tenants; tenantA and tenantB. Both have custom domains configured, so we can use the quick start to set up…

The GitHub sample is here. As per the docs for the Verified ID code sample for employee or guest onboarding: This sample showcases onboarding of a new hire using a Temporary Access Pass to remotely gain access to their corporate account. It also…

When Verified ID came out, you had to set everything up manually. Now they have a “wizard” that does it all for you. Go to the Verified ID blade in Entra. “If you have a custom domain registered for your Microsoft Entra tenant, you see this Get…

From the docs: “DIDs are user-generated, self-owned, globally unique identifiers rooted in decentralized systems like ION. They possess unique characteristics, like greater assurance of immutability, censorship resistance, and tamper evasiveness.…

There’s a good overview here. Imagine Woodgrove is a trusted site that issues credentials. My site offers a discount to all Woodgrove employees. The question is how do I know what “metadata” to use (Woodgrove DID’s etc.) to accomplish this. This is…

The Github sample is here. I used “OPTION 2 (Manually importing the postman collection and environment JSON files)”. I used the Postman Scratchpad to do this. I also have the .NET sample working so I could get most of the settings from…

First, read part 1. Part 1 is a website that issues and verifies VC. Part 2 is a B2C custom policy that uses the API in the website to issue and verify a VC from B2C. The custom policies and HTML are here. We will use the SignupOrSigninVCQ policy.…

If you haven’t read the first article, have a read here. Setup the basic VC stuff as per that article. The Github sample is here. There are three .NET samples there. The above link refers to the first sample. This post is about the third sample.…

I’ve been playing around with the samples for Verified ID and one of the key points is getting the Azure AD configuration correct. The docs. for the configuration are here. There are some tools to help you. ION Explorer The first is the ION Explorer.…

For a change, a non-B2C article! Verified credentials could well be the next big thing in Identity. So I was keen to jump in and have a look 😃 You can read up on the concepts here. First you have to configure your tenant. This was pretty…

stackoverflow recently posted that they would not accept any answer generated by ChatGPT. So I decided to find out how good ChatGPT was. Question 1 Why does the AD FS OpenID Connect userinfo endpoint return only “sub” Answer The AD FS OpenID Connect…

I’ve been doing a lot of work with custom policies lately and came across a number of things that might help other custom policy developers so I thought it worth while to note them. This article will be updated as I come across other tips and tricks.…

There are a lot of custom policy samples scattered all over the Internet so I thought I would try and collate them in one place Invariably, the links will change and break. Please report these in the comments. Also, please report any others that you…

This is a summary of the flows and examples using curl. Deciding Which Flow to Use Depending on the Relying Party A “Relying Party” is a web application running on a server. For example, a .war application. For OpenId Connect: Authorization Code The…