3

Microsoft Identity is Microsoft's framework for generating authentication.

My question is what is the relationship between Microsoft Identity and OAuth and OpenId ?.

Are Aouth and OpenId implemented in Microsoft Identity ?.

How can we use OAuth and OpenId with Microsoft Identity?

Thank you for the answer

Improve this question
1

1 Answer 1

Reset to default
1

enter image description here Please check Microsoft documentation here. https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-protocols

You can use identityserver4 which is built on top of oauth and openid.

Improve this answer
Sign up to request clarification or add additional context in comments.

13 Comments

You didn't explain the relationship between Microsoft Identity, Oauth, and OpenId.
OpenID Connect (OIDC) is an authentication protocol built on OAuth 2.0 that you can use to securely sign in a user to an application. When you use the Microsoft identity platform endpoint's implementation of OpenID Connect, you can add sign-in and API access to your apps. OpenID uses OAuth 2.0 authorization protocol for use as an authentication protocol, so that you can do single sign-on using OAuth. OpenID Connect introduces the concept of an ID token, which is a security token that allows the client to verify the identity of the user. The ID token also gets basic profile of the user.
How can we use OpenId with Asp.net and how can we also use OAuth with Asp.net? are they used together ? or each technology used seperately ?
OpenID is built using OAthu2.0 and Microsoft Identity uses OpenID. They are tied up together. Normally when user request a secured page from app server, identity server prompts credentials from user via a page from identity server (i.e. login page), generate id_token and send back to browser with redirect URI. Browser redirect to that URI, validates and send secure page to user. The identity server provided by Microsoft in Azure, use this identity server for multiple apps (i.e. asp.net app, android, java etc). You can build your own identity server app as well.
1. Identity app issues token (if you dont have it, you can use microsoft's in azure), send to other apps. Other apps knows the issuer. these apps validate the token from issuer and if okay, sent secure page to user.
|

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.