Secure your Intelligent Applications with Microsoft Entra
summary
Shows how to programmaticly register Entra apps with Microsoft Graph or Bicep, configure built-in authentication on App Service/Container Apps (demo injects user info via headers), and implement MSAL-based local auth and the on-behalf-of flow to exchange front-end tokens for back-end access. Demonstrates AI scenarios: streaming Azure OpenAI responses, AI Search filtering by user object IDs/groups, syncing Data Lake Gen2 ACLs into the index, and an upcoming managed-identity federated credential to eliminate client secrets (works in cloud, not yet locally).
AI-written summary · about
chapters (9)
- 0:00Introduction to identity
- 1:00Authentication concepts
- 5:11Implementing user sign-in
- 12:11Built-in auth and automation
- 18:45External and SDK auth flows
- 25:23AI app authorization patterns
- 28:51Secure AI search and storage
- 35:38Best practices and resources
- 39:11Q&A session
related talks
47mBuild secure applications with External Identities in Microsoft Entra
51mNavigating Modern Authentication in SQL
20mExplore CIAM capabilities with External Identities in Microsoft Entra
23mAndroid Application with Microsoft Identity Platform
41mEasy-Auth: The Easiest Way to Secure Your Application in Azure App Service
50mSecuring Serverless Applications in Azure
50mSecuring .NET Apps and Microservices in Azure
50mManaging Enterprise and Consumer Identity with Azure Active Directory