Active Directory Authentication Library (ADAL) v2 for .NET/Windows Store/Windows Phone–General Availability!

Active Directory Authentication Library (ADAL) v2 for .NET/Windows Store/Windows Phone–General Availability!

Today it is my honor and privilege to announce the general availability of ADAL v2 for .NET, Windows Store and Windows Phone apps! If you want to get it, all you need to do is to enter the following from the package manager in VS: Install-Package Microsoft.IdentityModel.Clients.ActiveDirectory Let’s talk about what we are…

Azure AD Records User Consent for Native Apps in the Refresh Token

Azure AD Records User Consent for Native Apps in the Refresh Token

An alternative title for this post could have been “Why users of my native app are prompted by Azure AD for consent every time they authenticate?”. In brief: for native apps, the consent granted by the user is recorded by Azure Active Directory in the refresh token issued on the first successful authentication….

The Common Endpoint: Walks Like a Tenant, Talks Like a Tenant… But Is Not a Tenant

The Common Endpoint: Walks Like a Tenant, Talks Like a Tenant… But Is Not a Tenant

The common endpoint is one of the most powerful development features of AAD – unfortunately, it is also one of the least intuitive ones. In this post I will give you a brief taste of what it does, what it is useful for, and how ADAL surfaces its strange properties. Azure AD Tenant…

Protecting an MVC4 VS2012 Project with OpenId Connect and Azure AD

Protecting an MVC4 VS2012 Project with OpenId Connect and Azure AD

I have to say I am pretty surprised by the attention that last week’s OIDC OWIN+WebForms post has garnered. Had I known, I would have posted about it much earlier! In the same spirit, here there’s another quick tutorial addressing a common FAQ: “My company is still on VS2012: can I use the…

Protecting an ASP.NET WebForms App with OpenId Connect and Azure AD

Protecting an ASP.NET WebForms App with OpenId Connect and Azure AD

All of our official .NET samples that show some web UX are based on MVC. This caused somebody to speculate that the new OWIN components for OpenId Connect and WS-Federation require MVC to function. Nothing farther from the true! You can totally use those to secure your WebForms apps. Here there’s a super…

ADAL v2 and Windows Integrated Authentication

The release candidate of ADAL v2 introduces a new, more straightforward way of leveraging Windows Integrated Authentication (WIA) for your AAD federated tenants in your Windows Store and .NET applications. Its use is very simple. You might have read here that we model direct username/password authentication by holding those credentials in one instance…