Who's your user? OpenID from the ground-up
summary
Shows a working Java/Azure demo app that performs the OAuth2 code flow with Google, Microsoft AD, Slack and a national Mobile ID, exchanging the redirect code at the token endpoint and receiving an ID token (JWT) which is decoded with jwt.io. Demonstrates that the JWT has three dot‑separated parts, that the stable sub and a tenant ID determine continuity and org trust, that roles appear as claims, and that conditional access can force MFA. The demo uses browser redirects and curl and the code is on GitHub.
AI-written summary · about
chapters (16)
- 0:00Introduction to OpenID
- 3:46Live demo with roles
- 6:19OAuth 2 code flow explained
- 7:05Real-world HTTP flow
- 9:33Decoding ID tokens
- 12:05Trusting identity claims
- 16:00Microsoft Active Directory demo
- 22:19Multi-tenant applications
- 23:03Hundred Acre Woods example
- 25:57Role assignment in AD
- 29:15Two-factor authentication
- 32:16Government ID services
- 36:25Trusting national identifiers
- 39:19Slack as identity provider
- 43:56Summary and key takeaways
- 47:12Q&A session
related talks
47mWho's your user? OpenID from the ground-up
28mOAuth 2.0 and OIDC
58mOAUTH, OPENID CONNECT & .NET – THE GOOD PARTS
39mSecuring your apps with OAuth2 and OpenID Connect
43mOAuth2, OpenID: live-coding SSO, from first principles
57mOpenID Connect Architectural Patterns
52mOAuth Demystified!
49mUnderstanding OAuth 2.0 & OIDC