Daily.Entra.NewsA cross-product view of Microsoft Entra changes related to Microsoft identity platform.
Replace `<application-object-id>` with the object ID of your app registration. Create one credential for each subject the workflow presents, such as a different branch or environment.
Replace `{appRegistrationObjectId}` with the application registration's object ID. You can find this value in the Microsoft Entra admin center under **Identity** > **Applications** > **App registrations** by selecting the app registration for your Global Secure Access application and copying the **Object ID** from the **Overview** page. To return to the default behavior, set `trafficRoutingMethod` to `random`. For more information, see [Update application](/graph/api/application-update?view=graph-rest-beta&preserve-view=true).
- GitHub Actions. First, configure a trust relationship between your [user-assigned managed identity](workload-identity-federation-create-trust-user-assigned-managed-identity.md) or [application](workload-identity-federation-create-trust.md) in Microsoft Entra ID and a GitHub repo in the [Microsoft Entra admin center](https://entra.microsoft.com) or using Microsoft Graph. Then [configure a GitHub Actions workflow](/azure/developer/github/connect-from-azure) to get an access token from Microsoft identity provider and access Azure resources.
Access tokens are a type of security token designed for authorization, granting access to specific resources on behalf of an authenticated user. Information in access tokens determines whether a user has the right to access a particular resource, similar to keys unlocking specific doors in a building. These individual pieces of information that make up tokens are called claims. Therefore, they are sensitive credentials and pose a security risk if not handled correctly. Access tokens differ from [ID tokens](./id-tokens.md) which serve as proof of authentication.
Claims reference with details on the claims included in access tokens issued by the Microsoft identity platform.
Learn about access tokens used in the Microsoft identity platform.
Learn how to acquire a token in a single-page app and call a web API using the Microsoft identity platform.
Learn about acquiring and caching tokens using MSAL.
Learn how to add sign-in in your Android app with an external tenant or workforce tenant by using Microsoft identity platform.
Learn about the sign-in flow of web, desktop, and mobile apps in Microsoft identity platform.
Learn about the process of registering your application so it can integrate with the Microsoft identity platform.
The types of apps and scenarios supported by the Microsoft identity platform.
Learn about the authentication flows supported by MSAL, such as authorization code, client credentials, and device code, to secure your apps effectively.
Understand the fundamentals of authentication, authorization, and how the Microsoft identity platform simplifies these processes for developers.
Learn about the basics of authorization in the Microsoft identity platform.
Learn how to avoid page reloads when acquiring and renewing tokens silently using the Microsoft Authentication Library for JavaScript (MSAL.js).
Learn about best practices, recommendations, and common oversights when integrating with the Microsoft identity platform.
The tutorials provide a step-by-step guide on how to call a protected web API in Android app for authentication.
Learn how to build a web app that calls protected web APIs using the Microsoft identity platform. Explore options for ASP.NET Core, ASP.NET, Java, Node.js, and Python.
Learn how to call a protected ASP.NET Core web API using the Microsoft identity platform with cURL.
Learn how to call a protected ASP.NET Core web API using the Microsoft identity platform and Insomnia.
Explanation of claims challenges, claims requests, and client capabilities in the Microsoft identity platform.
Learn about the custom claims policy and claims mapping policy types, which are used to modify the claims emitted in tokens in the Microsoft identity platform.
Learn about configuration options for public client and confidential client applications using the Microsoft Authentication Library (MSAL).
An index of identity platform code samples, grouped by app types, languages, and frameworks, shows how these libraries enable app authentication and authorization.
Include file that explains the common steps you need to take for all public client apps when it comes to migration from ADAL to MSAL.
Learn how to configure optional claims and attributes in access tokens issued by Microsoft identity platform; optional claims can add useful user information for your app.
In this quickstart, you learn how to create a Microsoft Entra tenant for use in developing applications that use the Microsoft identity platform for authentication and authorization.
Learn how to create agent identities that represent AI agents in your tenant using Microsoft Graph APIs and various authentication libraries.
Learn how to create an agent identity blueprint that serves as a template for multiple agent identities using Microsoft Graph APIs and PowerShell.
Learn about what custom RBAC is and why it's important to implement in applications.
Compare solutions for using Microsoft Entra External ID to work with people outside your organization, including B2B collaboration and Azure AD B2C.
Learn how to customize the claims issued by Microsoft identity platform in the JSON web token (JWT) token for enterprise applications.
Describes how to set up a pipeline in Azure Pipelines to build and deploy a web app to Azure and enable the Azure App Service built-in authentication. The article provides step-by-step instructions on how to configure Azure resources, build and deploy a web application, create a Microsoft Entra app registration, and configure App Service built-in authentication using Azure Pipelines.
Developer guidance and scenarios for Microsoft Entra Conditional Access and Microsoft identity platform.
Developer guidance and scenarios for Microsoft Entra Conditional Access authentication context
Learn how developers can request for permissions through consent in the Microsoft identity platform endpoint.
Disable sign-up in your user flow with Microsoft Graph API. Prevent new registrations and allow only sign-in for your external users.
As a developer, I want to learn how to acquire tokens for web APIs so that I can enable secure API calls in my application.
Learn how to handle errors and exceptions, Conditional Access claims challenges, and retries in MSAL.js applications.
In this how-to guide, register a web API with the Microsoft identity platform and configure its scopes, exposing it to clients for permissions-based access to the API's resources.
Learn the benefits of integrating your application with the Microsoft identity platform, and get resources for features like simplified sign-in, identity management, multifactor authentication, and access control.
In this how-to, you configure an application registered with the Microsoft identity platform to change who, or what accounts, can access the application.
Learn how to remove an application registered with the Microsoft identity platform.
In this how-to, you learn how to restore or permanently delete a recently deleted application registered with the Microsoft identity platform.
Learn the details of the claims included in ID tokens issued by the Microsoft identity platform.
Learn about ID tokens used in the Microsoft identity platform.
manager: pmwongera
manager: pmwongera
manager: pmwongera
Learn how using Zero Trust principles can help increase the security of your application and its data.
Learn about initializing client applications using the Microsoft Authentication Library for JavaScript (MSAL.js).
Use the Microsoft Authentication Library for JavaScript (MSAL.js) with Internet Explorer browser.
Learn about know issues when using the Microsoft Authentication Library for JavaScript (MSAL.js) with Internet Explorer and Microsoft Edge browsers.
The Microsoft Authentication Extensions for Node enables application developers to perform cross-platform token cache serialization and persistence. It gives extra support to the Microsoft Authentication Library for Node (MSAL Node).
Learn how to log errors and exceptions in MSAL.js
Describes how to mark an app as publisher verified. When an application is marked as publisher verified, it means that the publisher (application developer) verified the authenticity of their organization using a Cloud Partner Program (CPP) account that completed the verification process and associated this CPP account with that application registration.
Comprehensive guide for understanding and using the Microsoft Authentication Library (MSAL) and Microsoft Account (MSA) Server Side APIs.
Learn about app registration and authentication endpoints for national clouds.
An overview of the Microsoft identity platform accounts for Android
A description of authorization in the Microsoft identity platform, including scopes, permissions, and consent.
Learn about application scenarios for the Microsoft identity platform, including authenticating identities, acquiring tokens, and calling protected APIs.
Learn about when and how to use app-only access in the Microsoft identity platform endpoint.
List of client libraries and middleware compatible with the Microsoft identity platform. Use these libraries to add support for user sign-in (authentication) and protected web API access (authorization) to your applications.
This article discusses the registration and use of certificate credentials for application authentication.
Learn about when and how to use delegated access in the Microsoft identity platform endpoint.
Learn key terms used in Microsoft identity platform documentation, Microsoft Entra admin center, and authentication SDKs like the Microsoft Authentication Library (MSAL).
Learn about the components of the Microsoft identity platform and how they can help you build identity and access management (IAM) support into your applications.
Learn about the UserInfo endpoint on the Microsoft identity platform.
A list of videos about modern authentication and the Microsoft identity platform
How to update a JavaScript SPA using MSAL.js 2.x and the authorization code flow with PKCE and CORS support.
Learn about the differences between the Microsoft Authentication Library (MSAL) and Azure AD Authentication Library (ADAL) and how to migrate to MSAL.
How to update your existing JavaScript application to use the Microsoft Authentication Library (MSAL) for authentication and authorization instead of the Active Directory Authentication Library (ADAL).
How to update your existing Node.js application to use the Microsoft Authentication Library (MSAL) for authentication and authorization instead of the Active Directory Authentication Library (ADAL).
Claims reference with details on the optional claims that can be included in tokens in the Microsoft identity platform.
Learn the foundational concepts and scenarios around consent and permissions in the Microsoft identity platform
Learn how to pass a custom state parameter value in authentication request using the Microsoft Authentication Library for JavaScript (MSAL.js).
Learn how to add Microsoft Authentication Library (MSAL) native auth SDK framework to your Android app.
Learn how to add Microsoft Authentication Library (MSAL) native auth SDK framework to your iOS/macOS application.
Learn to customize prompt behavior using the Microsoft Authentication Library for JavaScript (MSAL.js).
Learn about public client and confidential client applications in the Microsoft Authentication Library (MSAL).
Learn about benefits, program requirements, and frequently asked questions in the publisher verification program for the Microsoft identity platform.
A daemon app code sample quickstart that shows how to acquire an access token to call a protected web API by using Microsoft identity platform
Quickstart for configuring a sample Desktop app to sign in employees or customers with Microsoft identity platform.
Quickstart for configuring a sample mobile app to sign in employees or customers with Microsoft identity platform.
Quickstart that shows how to configure a sample SPA that signs in employees or customers by using the Microsoft identity platform
In this quickstart, you learn how to implement authentication with a Node.js web app and the Microsoft Authentication Library (MSAL) for Node.js.
In this quickstart, you learn how to implement authentication with a Node.js web app and the Microsoft Authentication Library (MSAL) for Node.js.
In this quickstart, learn how Android applications can call an API that requires access tokens issued by the Microsoft identity platform.
In this quickstart, learn how an iOS or macOS app can sign in users, get an access token from the Microsoft identity platform, and call the Microsoft Graph API.
In this quickstart, learn how an iOS or macOS app can sign in users, get an access token from the Microsoft identity platform, and call the Microsoft Graph API.
In this quickstart, learn how a Python web app can sign in users, get an access token from the Microsoft identity platform, and call the Microsoft Graph API.
In this quickstart, learn how a Python web app can sign in users, get an access token from the Microsoft identity platform, and call the Microsoft Graph API.
In this quickstart, you download and modify a code sample that demonstrates how to protect an ASP.NET web API by using the Microsoft identity platform for authorization.
In this quickstart, learn how to call an ASP.NET web API that's protected by the Microsoft identity platform from a Windows Desktop (WPF) application.
In this quickstart, learn how to call an ASP.NET web API that's protected by the Microsoft identity platform from a Windows Desktop (WPF) application.
In this quickstart, you learn how a Java app can get an access token and call an API protected by Microsoft identity platform endpoint, using the app's own identity
In this quickstart, you learn how a Java app can get an access token and call an API protected by Microsoft identity platform endpoint, using the app's own identity
In this quickstart, you download and run a code sample that shows how a Node.js console application can get an access token and call an API protected by a Microsoft identity platform endpoint, using the app's own identity
In this quickstart, you download and run a code sample that shows how a Node.js console application can get an access token and call an API protected by a Microsoft identity platform endpoint, using the app's own identity
In this quickstart, you learn how a Node.js Electron desktop application can sign-in users and get an access token to call an API protected by a Microsoft identity platform endpoint
In this quickstart, you learn how a Node.js Electron desktop application can sign-in users and get an access token to call an API protected by a Microsoft identity platform endpoint
In this quickstart, you learn how a Python process can get an access token and call an API protected by Microsoft identity platform, using the app's own identity
In this quickstart, you learn how a Python process can get an access token and call an API protected by Microsoft identity platform, using the app's own identity
In this quickstart, you download and modify a code sample that demonstrates how to protect an ASP.NET Core web API by using the Microsoft identity platform for authorization.
In this quickstart, you download and modify a code sample that demonstrates how to protect an ASP.NET Core web API by using the Microsoft identity platform for authorization.
In this quickstart, you learn how to register an application with the Microsoft identity platform.
In this quickstart, learn how Android applications can call an API that requires access tokens issued by the Microsoft identity platform.
In this quickstart, learn how a Universal Windows Platform (UWP) application can get an access token and call an API protected by Microsoft identity platform.
In this quickstart, learn how a Universal Windows Platform (UWP) application can get an access token and call an API protected by Microsoft identity platform.
In this quickstart, learn how a Windows Presentation Foundation (WPF) application can get an access token and call an API protected by the Microsoft identity platform.
In this quickstart, learn how a Windows Presentation Foundation (WPF) app can get an access token and call an API protected by the Microsoft identity platform.
A description of the best practices and limitations of redirect URIs in the Microsoft identity platform.
Learn about refresh tokens that are used in the Microsoft identity platform.
Learn how to remove accounts from the token cache during global sign-out in web apps that call web APIs using the Microsoft identity platform.
Learn how to run automated integration tests as a user against APIs protected by the Microsoft identity platform. Use the Resource Owner Password Credential Grant (ROPC) auth flow to sign in as a user instead of automating the interactive sign-in prompt UI.
Learn how to set up a Microsoft Entra test environment so you can test your application integrated with Microsoft identity platform. Evaluate whether you need a separate tenant for testing or if you can use your production tenant.
