Hands on Azure Active Directory Service Principals and Azure REST API Examples with Postman

[@maverickiy9366]

Very helpful video. Please make more videos on Azure :)

[@kritikaagarwal1655]

This video has genuinely saved me hours! Can you please make one on OBO flow, HOBO V2? We need more people like you! Thank you a tonne.

[@bikram5613]

@Cornel Human I'm getting error like: { "error": { "code": "LinkedAuthorizationFailed", "message": "The client 'xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx' with object id 'xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx' has permission to perform action 'Microsoft.Authorization/roleDefinitions/write' on scope '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx'; however, it does not have permission to perform action 'Microsoft.Authorization/roleDefinitions/write' on the linked scope(s) '/providers/Microsoft.Management/managementGroups/marketing-group' or the linked scope(s) are invalid." } } I have followed exactly same step stated between 12:10 - 15:00 PS: I'm trying to create custom role through Rest Api. Please help me

[@nashatuanli9346]

Is there an article which explains the rules to generate the registration link we are going o send to the external tenants?

[@cornelhuman1940]

Just replace {clientid} with your clientid. The Service Principal needs to be a multi tenant one for this to work. Depending on what you do it may need extra access roles defined on the resources it needs access to login.microsoftonline.com/common/oauth2/authorize?client_id={clientid}&prompt=admin_consent&response_type=code

[@arvindpurohit2722]

Great video .... I am searching for login using active directory user/pwd also create user api

[@mma206224398]

So we are investigating implementing a similar azure AD application proxy ...IE initial user authentication and then acting as a reverse proxy to the internal web applications We see this as a requirement to securely allow our employees to access selected internal applications from their own devices from external (internet) So could you assist please with guidance on how this can be achieved? Also how we can enable/implement sms and email?

[@cornelhuman1940]

Hi Zaza, In general the idea with this Azure Active Directory Video was around developing applications that Authenticate using Active Directory. What you are talking about sounds more like you looking to implement a VPN. And there are VPN solutions that can authenticate with Active Directory. When you say you are looking for email and sms what are you looking for, an email service provider like a Gmail or Office365 and sms, are you looking for 2 factor authentication or to actually send sms'es to your clients? There would be many factors to consider, size of company, number of clients, budget etc. And security is a large problem these days with ever increasing amounts of cyber attacks. A lot of people try to save money by going the cheap route, and then pay the price when their security gets compromised.

[@cloudlabs1]

nice and great video, it truly helps me to understand to how to call restapi to Azure resources. can you post the postman queries you showed in the demo? it is hard to see and type from videos.

[@harveyz6314]

Very nice video! Finally understand what is a service principle!

[@BurningZa]

Good stuff - The South African accent is also refreshing :)

[@cornelhuman1940]

No hiding my accent :) Even more difficult for an Afrikaans guy like me. Have fun with Azure Active Directory!

[@BurningZa]

@@cornelhuman1940 Auzure ftw! Is ook Afrikaans - You speak english deliciously :)

[@anjanchidige]

Simply awesome. Outstanding demos and explanation.

[@Jmstr-p6h]

Great. Thx!

[@beltek01]

This is a gem...cant thank you enough

[@ulrichbeutenmuller8101]

you made my day 😀

[@abderahmanm7906]

Great content !

[@neilruston8796]

Great video but watch out for references to 'AD' and 'Active Directory' which should instead be 'AAD' and 'Azure Active Directory'.

[@fernandamorais7088]

Tu