Kim might no longer update his blog, nudge identity products toward his vision or give inspiring, generous talks to audiences large and small, but his influence looms large in the identity industry – an industry Kim changed forever. A lot has been written about Kim’s legacy to the industry already, by people who…
I am having a Twitter thread about why the Microsoft Graph- and only the Microsoft Graph- should be the one validating access tokens obtained by a client for calling the Microsoft Graph. However I am failing to explain that effectively in 240 chars quanta, so here I am – breaking a ~7 months…
In less than one week I have to check in for my flight to Orlando, where a huge amount of professionals is going to gather under one roof for one week to learn, network, have HR-approved fun- and none of my demos work yet! Sessions On Wednesday morning (10:25am) I am going to…
Last week I saw a StackOverflow question where a user was wrestling with an app requesting admin consent. The user wanted to contact an administrator, to ask for the app to be consented, and didn’t know how to do that. That’s actually an excellent question. I asked around, and it would appear that…
Configuring the ASP.NET OWIN middleware (MW from now on) in your web app makes it super easy to sent your users to authenticate with Azure AD, as the MW takes care of manufacturing the right message for the Authorization endpoint from the options you provided at startup. However, there are many situations in…
The mission and scope of the identity team at Microsoft keeps growing – and we need great people to keep the momentum! Here there’s a handful of developer and leadership positions right in my immediate team: Engineering manager IOS developer Android developer DevOps Engineer The opportunity for having an impact has…
About one year ago, I was all excited to finally hold in my hands the thing that swallowed most of the weekends and vacation days of 2015: a paper copy of my latest book, “Modern Authentication with Azure Active Directory for web Applications”. And I just realized I never wrote an “announcement” post,…
Few years ago I wrote a post about how you can obtain the ID of a tenant from one of its domains. Something so simple, and yet I am told that it ended up to be of use for lots of people. Yay! (BTW, at the time the root domain for Azure AD…
TL;DR: as of today, Azure AD apps created on portal.azure.com won’t be provisioned in your development tenant. This post offers a simple JS form that helps you to do just that. You might recall that a couple of weeks ago Azure AD finally landed on portal.azure.com. One of the key differences you’ll…
For the longest time, I watched with envy as my Azure colleagues drove their conference demos from the shiny portal.azure.com, while I had to stick with the good ol’ manage.windowsazure.com. Well, guess what! Yesterday we announced that the Azure AD management features are finally appearing in preview in portal.azure.com. Jeff wrote an excellent…