Protect APIs in API Management using Azure Active Directory

[@xuhongliu537]

really great demo, whole process explained perfectly

[@darryltaylor9282]

This is an excellent overview. I'm shocked how much information you packed into 30 minutes. I'd love to see a more detailed one hour version using Postman as the client.

[@AzurePowerLunch]

Gla dyou liked it. Just need to find the time.

[@papidulzuratravel8715]

Amazing thanks ❤

[@aniketmhala7299]

wonderful explanation.

[@stind001]

Nice explanation!

[@weblogic7723]

Where was the issues obtained from ? In the video it was just pasted.

[@MightyVigilius]

nice tutorial! But what if I want the app/client to be able to call AAD and get a token without having to authenticate the user?

[@adityakalburgi1548]

I am getting security recommendation as API endpoints in azure api management should be authenticated. I have openai as backend & I dont want to use Azure AD. How should I resolve this issue using other self service setup other than Azure AD. Can you please guide me on this?

[@ianwanjala8621]

you can use the api key based authentication to protect your apis. Just go to the api section, select the api and then click on settings. Tick the option for subscription and approvals and you'll get what you are looking for.

[@Harsh-se1gx]

Can I get the token with postman?

[@cloudbaud7794]

it is not quite correct to call it a "Developer" portal. this is the Consumers Portal. because folks who are creating the APIs and publishing it to APIM or Azure Portal are also developers. but they are Producers. and the third entity is the API admin - who in large org are a separate persona. They typically dont know or dont have the bandwidth to know and understand the business context each of the APIs