Authentication fundamentals: Native client applications- Part 1 | Microsoft Entra ID

[@WilsonMar1]

Is there a playlist of all Stuart's videos? He's a rock star.

[@starrunner5258]

watch the playlist in reverse order, i.e: last video in the playlist first ! (videos have been uploaded in wrong order in the playlist 😅)

[@navneetkumar4264]

Thanks you are a saviour

[@zumado]

After 15 years working with lots of vendors, Microsoft support, Microsoft TAM and sales teams, Stuart Kwan is the only one who explained this so clearly.

[@psaklani]

The order of videos for the playlist "Authentication fundamentals: " seems to be incorrect. Watch the playlist in reverse order, i.e: last video in the playlist first! (videos have been uploaded in wrong order in the playlist)

[@hariomkuntal9520]

How does the web view give back the Auth code back to outlook client ?

[@graybeard2569]

Are you really writing all the text right to left, with the characters mirrored? Impressive!

[@marktraudt]

What are you using to draw on the screen?

[@anusharamachandra3176]

Shouldn't the initial request from webview be using a OpenID Connect protocol so that both id_token and access_token are retrieved ? To identify Alice, an id_token is required (authentication). To know what actions Alice can perform, an acess_token is required (authorization). PS: OpenID Connect is built on top of OAuth2.0 to provide identity information in the token.

[@whatsnxt9144]

Is the Oauth 2.0 flow different for web app ( owa) vs native client ( outlook) ?

[@MicrosoftAzure]

Hello! In this instance, we'd like to encourage you to explore the various flow scenarios and their functionality on this Microsoft Learn webpage. Additionally, you'll have the opportunity to compare their distinctions when it comes to (Web application versus native client). You can find more information at this link: msft.it/60509ePw8

[@roylucky4674]

Instead of Azure AD sending the request to ADFS server (on-premise ,lets say). Can the Outlook client send the request directly to ADFS server. If that's possible what's the benefit of having Azure AD?

[@GigabitJack]

If the Outlook client is authenticating directly with ADFS, then Azure AD isn't in the picture. Using Azure AD, you gain all the various modern auth capabilities, like Conditional Access, MFA (Azure or 3rd party), and potentially machine-learning user risk policies (depending on licensing). User experience is more seamless and faster with AAD, and there's no need to maintain the existing ADFS infrastructure (servers and architecture) once moved to AAD. For a federated environment, all your apps and clients (Outlook or otherwise) are authenticating with Azure AD and you're getting all the security benefits of Azure AD, but when a user first authenticates to Azure AD, AAD will send that request to ADFS to perform actual user auth and then everything else is all on the AAD side.

[@timgraf7933]

Azure Active Directory is now Micosoft Entra ID

[@TonyTigerTonyTiger]

Does this 5-part playlist still apply? It is 4 years old

[@WayneGreen-g8l]

What's a federated domain?

[@MicrosoftAzure]

Hi there, you can learn about federation in Entra ID (formerly Azure Active Directory) here: msft.it/6051cf8tT

[@VemanthOggu]

I want Microsoft entra

[@mrobjectoriented]

Azure Active Directory authentication diagram is essentially a Nokia Snake game.

[@gianpaolozanconato5012]

😂😂

[@jkimau]

I am thinking we can do better than this - back and forth like 10 times...

[@CTPAX216]

Crypto wallet? :)

[@levgtz8158]

The guy looks like struggling with his "explanation"

[@starrunner5258]

yeah, it would be real difficult to follow if one doesn't know the basics.