Joonas Westlin • 1/6/2018

Using Azure AD On-Behalf-Of flow in an ASP.NET Core 2.0 API

This article provides a detailed tutorial on using the Azure Active Directory On-Behalf-Of (OBO) flow within an ASP.NET Core 2.0 API. It explains the scenario where a web API, after receiving a user's token, exchanges it for a new token to call another protected API (like Microsoft Graph) on the user's behalf. The post covers the conceptual flow, startup configuration for JWT authentication, and the principle of using delegated permissions for least-privilege access.

0 comments

#API Security #Aspnet Core #OAUTH 20