Is Azure OAuth 2 auth code grant an authentication protocol -
sorry still confused, read everywhere telling me oath authorisation protocol appears using azure ad oauth code grant, promote login screen authenticate against directory, not authentication process? relationship between open id connect? thanks!!
the oauth2.0 protocol has several flows identity provider (in case azure ad) may implement support auth.
the auth code flow in fact 1 of these used apps access tokens api. flow quite simple, app redirects user identity providers /authorize
endpoint. @ point user enters credentials, , site redirects application authorization code , can issue id token
represents user (this openid connect part). app takes code, , posts /token
endpoint , issued access token
, refresh token
. access token
, app can access whatever api you've requested access for.
for azure ad specifically, microsoft has built libraries handle these flows , token caching of complexity abstracted away. there's simple code samples can checkout may find helpful. authentication protocols , scenarios doc azure ad may helpful conceptual information.
Comments
Post a Comment