Foreword |
|
xi | |
Introduction |
|
xiii | |
Chapter 1 Your first Active Directory app |
|
1 | (10) |
|
|
1 | (1) |
|
|
1 | (2) |
|
Microsoft Azure subscription |
|
|
2 | (1) |
|
|
2 | (1) |
|
|
3 | (1) |
|
|
4 | (3) |
|
ClaimsPrincipal: How .NET represents the caller |
|
|
7 | (3) |
|
|
10 | (1) |
Chapter 2 Identity protocols and application types |
|
11 | (40) |
|
Pre-claims authentication techniques |
|
|
12 | (5) |
|
Passwords, profile stores, and individual applications |
|
|
12 | (2) |
|
Domains, integrated authentication, and applications on an Intranet |
|
|
14 | (3) |
|
|
17 | (6) |
|
Identity providers: DCs for the Internet |
|
|
17 | (1) |
|
|
18 | (2) |
|
|
20 | (1) |
|
Claims-oriented protocols |
|
|
20 | (3) |
|
Round-trip web apps, first-generation protocols |
|
|
23 | (8) |
|
The problem of cross-domain single sign-on |
|
|
23 | (2) |
|
|
25 | (2) |
|
|
27 | (4) |
|
Modern apps, modern protocols |
|
|
31 | (18) |
|
The rise of the programmable web and the problem of access delegation |
|
|
32 | (1) |
|
OAuth2 and web applications |
|
|
33 | (4) |
|
Layering web sign-in on OAuth |
|
|
37 | (2) |
|
|
39 | (5) |
|
More API consumption scenarios |
|
|
44 | (1) |
|
|
45 | (2) |
|
Leveraging web investments in native clients |
|
|
47 | (2) |
|
|
49 | (2) |
Chapter 3 Introducing Azure Active Directory and Active Directory Federation Services |
|
51 | (18) |
|
Active Directory Federation Services |
|
|
52 | (4) |
|
|
53 | (1) |
|
|
54 | (1) |
|
|
55 | (1) |
|
Azure Active Directory: Identity as a service |
|
|
56 | (11) |
|
|
60 | (1) |
|
Getting Azure Active Directory |
|
|
61 | (2) |
|
Azure AD for developers: Components |
|
|
63 | (2) |
|
Notable nondeveloper features |
|
|
65 | (2) |
|
|
67 | (2) |
Chapter 4 Introducing the identity developer libraries |
|
69 | (20) |
|
Token requestors and resource protectors |
|
|
69 | (6) |
|
|
70 | (3) |
|
|
73 | (1) |
|
|
74 | (1) |
|
The Azure AD libraries landscape |
|
|
75 | (10) |
|
|
76 | (5) |
|
|
81 | (4) |
|
|
85 | (1) |
|
Visual Studio integration |
|
|
85 | (2) |
|
AD integration features in Visual Studio 2013 |
|
|
86 | (1) |
|
AD integration features in Visual Studio 2015 |
|
|
86 | (1) |
|
|
87 | (2) |
Chapter 5 Getting started with web sign-on and Active Directory |
|
89 | (18) |
|
The web app you build in this chapter |
|
|
89 | (1) |
|
|
90 | (1) |
|
|
90 | (1) |
|
|
90 | (2) |
|
NuGet packages references |
|
|
92 | (1) |
|
Registering the app in Azure AD |
|
|
93 | (2) |
|
OpeniD Connect initialization code |
|
|
95 | (2) |
|
|
95 | (1) |
|
Initialize the cookie and OpenID Connect middlewares |
|
|
96 | (1) |
|
[ Authorize], claims, and first run |
|
|
97 | (2) |
|
Adding a trigger for authentication |
|
|
97 | (1) |
|
|
98 | (1) |
|
|
99 | (1) |
|
|
99 | (1) |
|
|
99 | (4) |
|
|
100 | (1) |
|
|
101 | (1) |
|
The sign-in and sign-out UI |
|
|
102 | (1) |
|
|
103 | (1) |
|
Using ADFS as an identity provider |
|
|
103 | (2) |
|
|
105 | (2) |
Chapter 6 OpeniD Connect and Azure AD web sign-on |
|
107 | (30) |
|
The protocol and its specifications |
|
|
107 | (3) |
|
|
108 | (1) |
|
|
108 | (1) |
|
OAuth 2.0 Multiple Response Type, OAuth2 Form Post Response Mode |
|
|
109 | (1) |
|
OpenID Connection Session Management |
|
|
109 | (1) |
|
Other OpeniD Connect specifications |
|
|
109 | (1) |
|
Supporting specifications |
|
|
109 | (1) |
|
OpenID Connect exchanges signing in with Azure AD |
|
|
110 | (24) |
|
|
110 | (3) |
|
|
113 | (6) |
|
|
119 | (3) |
|
|
122 | (1) |
|
|
123 | (3) |
|
|
126 | (1) |
|
The ID token and the JWT format |
|
|
127 | (7) |
|
OpenID Connect exchanges for signing out from the app and Azure AD |
|
|
134 | (2) |
|
|
136 | (1) |
Chapter 7 The OWIN OpeniD Connect middleware |
|
137 | (36) |
|
|
137 | (18) |
|
|
137 | (2) |
|
|
139 | (16) |
|
OpenID Connect middleware |
|
|
155 | (12) |
|
OpenIdConnectAuthenticationOptions |
|
|
155 | (4) |
|
|
159 | (8) |
|
To ken ValidationParameters |
|
|
167 | (4) |
|
|
168 | (1) |
|
|
169 | (1) |
|
|
169 | (1) |
|
|
170 | (1) |
|
|
171 | (1) |
|
|
172 | (1) |
Chapter 8 Azure Active Directory application model |
|
173 | (50) |
|
The building blocks: Application and ServicePrincipal |
|
|
174 | (15) |
|
|
177 | (10) |
|
The ServicePrincipal object |
|
|
187 | (2) |
|
Consent and delegated permissions |
|
|
189 | (22) |
|
Application created by a nonadmin user |
|
|
189 | (3) |
|
Interlude: Delegated permissions to access the directory |
|
|
192 | (5) |
|
Application requesting admin-level permissions |
|
|
197 | (3) |
|
|
200 | (4) |
|
Application created by an admin user |
|
|
204 | (1) |
|
|
205 | (6) |
|
App user assignment, app permissions, and app roles |
|
|
211 | (8) |
|
|
211 | (2) |
|
|
213 | (3) |
|
|
216 | (3) |
|
|
219 | (2) |
|
|
221 | (2) |
Chapter 9 Consuming and exposing a web API protected by Azure Active Directory |
|
223 | (50) |
|
Consuming a web API from a web application |
|
|
223 | (30) |
|
Redeeming an authorization code in the OpenID Connect hybrid flow |
|
|
224 | (8) |
|
Using the access token for invoking a web API |
|
|
232 | (19) |
|
Other ways of getting access tokens |
|
|
251 | (2) |
|
Exposing a protected web API |
|
|
253 | (19) |
|
Setting up a web API project |
|
|
253 | (5) |
|
|
258 | (7) |
|
Exposing both a web UX and a web API from the same Visual Studio project |
|
|
265 | (1) |
|
A web API calling another API: Flowing the identity of the caller and using "on behalf of" |
|
|
266 | (5) |
|
Protecting a web API with ADFS "3" |
|
|
271 | (1) |
|
|
272 | (1) |
Chapter 10 Active Directory Federation Services in Windows Server 2016 Technical Preview 3 |
|
273 | (20) |
|
|
273 | (1) |
|
|
274 | (2) |
|
Web sign-on with OpenID Connect and ADFS |
|
|
276 | (5) |
|
OpenID Connect middleware and ADFS |
|
|
276 | (1) |
|
Setting up a web app in ADFS |
|
|
277 | (3) |
|
Testing the web sign-on feature |
|
|
280 | (1) |
|
Protecting a web API with ADFS and invoking it from a web app |
|
|
281 | (11) |
|
Setting up a web API in ADFS |
|
|
281 | (4) |
|
Code for obtaining an access token from ADFS and invoking a web API |
|
|
285 | (3) |
|
Testing the web API invocation feature |
|
|
288 | (1) |
|
|
289 | (3) |
|
|
292 | (1) |
Appendix: Further reading |
|
293 | (2) |
Index |
|
295 | |