Microsoft Entra ID For Developers and Architects

Explore the fundamentals of authentication and authorization as cornerstones of identity management, and learn how to apply them in apps on Android using Entra ID, with shorthand notations explained.

Explore authentication concepts, flows, and architecture, including the user store, authentication engine, and software component, and learn about authentication types and two factor and multi factor options.

Explore the OAuth 2.0 flow, including the user, client app, authorization server, and resource server, and learn how access tokens, redirects, and app registration enable secure API access.

Define and enforce authorization by applying least privilege to actions and data, implementing action and data authorization via role-based access control, with options in authentication engines or separate stores.

OpenID Connect serves as the authentication layer built on OAuth, adding end-user authentication and enabling single login across websites, while OAuth handles authorization between servers.

Uncover how scopes govern both user information requests and api permissions in OAuth and OpenID Connect. Explore examples like OpenID, email, profile, and api scopes such as user.read and orders.create.

Explore how claims, or name-value pairs in tokens from the authorization server, work, including default and custom claims, with examples like family name, given name, locale, and preferred username.

Explore the roles of access tokens, ID tokens, and refresh tokens in OAuth and OpenID Connect, including typical claims, lifetimes, and how clients and servers use them.

jwt is the access token issued by the authorization server that carries user data for api authentication and authorization, with header, payload, and signature encoded in base64.

Learn about entry id, a cloud identity and access management service within the Microsoft Identity platform, and its popular products, Microsoft Entry ID and Microsoft entry external ID.

Discover Microsoft Entra ID capabilities, including users and groups management, identity service, MFA with conditional access, and monitoring and reporting in a cloud-based identity provider with OAuth2 and OpenID Connect.

Compare the pre-cloud model of owning and maintaining servers with cloud solutions, illustrating how underutilized hardware wastes money and CPU load spikes during Black Friday.

Learn what the cloud is: compute, networking, and storage managed by providers in global data centers, with on-demand services you can use and pay for as you go.

Explore the five cloud computing characteristics—on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service—and see how automated provisioning enables scalable, pay-as-you-go resources.

Compare IaaS, PaaS, and SaaS to understand cloud responsibilities from infrastructure to software. Recognize virtual machines, web apps, and services like Office 365 as examples, and note control levels.

Explore public, private, and hybrid clouds, with this course focusing on the public cloud and providers like AWS, Azure, and Google Cloud.

Explore cloud providers and their leaders—AWS, Azure, and Google Cloud Platform—through growth trends, and see why Azure is the fastest growing public cloud and why learning Azure matters.

Introduction to Azure explains Microsoft's public cloud, launched in 2010 as the second largest, evolving from PaaS to IaaS and offering the widest range of cloud services for major clients.

Discover how Azure regions and availability zones safeguard uptime, with about 60 global regions and multiple data centers per region; learn how paired regions mirror data for resilience.

Explore how Azure offers hundreds of cloud services, from virtual machines to databases and networks, organized by categories such as compute. Create a free account to start using Azure services.

Create a free Azure trial by providing a valid credit card and phone, note the $200 credit, and verify via email and SMS to access the portal.

Navigate the Azure portal, the one-stop shop to create, remove, and monitor resources like virtual machines, SQL databases, and Cosmos DB, using the toolbar and search bar.

Understand that a subscription is the logical container for resources, while an account is the identity to access them; subscriptions host resources, and accounts connect to subscriptions.

Create your first resource in Azure by creating a resource group, selecting the subscription and region, and reviewing the creation with a notification.

Find and access your resource groups quickly by using the intelligent search bar, viewing recent resources, and recognizing resource types by icons to locate and open 'my RG'.

Explore the resource page tour in Azure, review resource group details, location, and subscription info, and learn to navigate menus for settings, cost management, monitoring, automation, and access control.

Delete a resource group in the Azure portal by confirming the name, understanding this action removes all contained resources, and verifying deletion by checking the empty resource group list.

Explore using Azure CLI and Azure PowerShell via Cloud Shell and local installations to manage resources, create and delete resource groups, and switch between Bash and PowerShell.

Learn how to choose Azure regions by considering geographical proximity to your audience, service availability, availability zones, and regional pricing to ensure optimal performance and redundancy.

Resource groups are logical containers that group resources by boundary, such as development, test, or production. They are free, differ from subscriptions as cost centers, and sit under management groups.

Understand storage accounts as a cheap Azure resource used by services to store backups, VM disks, diagnostic data, and lots more, with explicit data storage discussed later.

Explore how service level agreements set cloud uptime across Azure services, compare 95%, 99.95%, and 99.995% SLAs, and calculate the actual system SLA by multiplying component SLAs.

Explore cloud pricing and cost management across models—per resource, per consumption, and reservations—using the Azure pricing calculator to compare regions, operating systems, and reserved options.

Create a separate Microsoft Entra ID tenant for development by activating a 30-day P2 license trial in the Azure portal and configuring a new tenant with a user and domain.

Add new users in Microsoft Entra ID, configure their profiles and passwords, test sign-in, and enable multi-factor authentication with an authenticator app while understanding role assignments.

Create and manage security groups in a Microsoft Entra ID tenant, assign members and roles, and ensure users inherit group permissions.

Explore security defaults, an on by default set that enables multi-factor authentication for the tenant, with admins prompted to register Microsoft Authenticator.

Understand the cost and license options in Entra ID, from free to P1, P2, and Microsoft 365, highlighting MFA control, SLA differences, and conditional access.

Explore AD Connect to sync on-prem Active Directory with Azure AD, delivering a unified user base across cloud and on-prem, choosing between password hash sync and pass-through.

Install the .NET SDK, Node.js, Python, and VS Code with extensions to build a real-world app integrated with Azure AD and Azure AD B2C, guiding developers and architects through steps.

Install the dotnet sdk by downloading the Windows 64-bit installer from the official site, install dotnet 6.0, and verify the installation with dotnet --version.

Install Visual Studio Code on Windows 64-bit, launch and configure it, pin to the taskbar, and install the Microsoft C# extension to prepare for .NET development of the NOP system.

Install extensions in vscode to empower dotnet core development and cloud work, including the C sharp extension (or dev kit for Solution Explorer) and the Azure Tools extension pack.

Introduce the HR management app and its HTML pages and REST API, then demonstrate implementing authentication and authorization using Android.

Create a new dotnet web app, enable single-tenant authentication with Azure AD, and update appsettings.json with tenant ID and domain in VSCode.

Learn how to enable android authentication by registering your app, the essential first step that tells android about your app and enables customization.

Register an application in Entra ID to create a unique app registration ID used in the sign-in flow to apply settings, the callback URL, and the ID token.

Learn to create a Microsoft Entra ID app registration for a web app, configure redirect URI and OpenID Connect, and enable ID and access tokens for authentication.

Explore the authentication flow with browser dev tools, inspect requests and redirects, examine id tokens and claims, and map the user name from the token in a .NET app.