Who's your user? OpenID from the ground-up
summary
A live demo app authenticates with Google, Microsoft Azure AD (multi-tenant) and Norway’s ID-porten/BankID using the standard code exchange, decodes ID tokens and shows claims, tenant IDs, and a surprising role-from-group-mapping flow that grants a "terrific" role across tenants. Shows short ID token lifetimes (about two minutes) vs longer SSO, and recommends building a manual proof‑of‑concept before using frameworks. Good if wanting hands‑on OpenID Connect details and pitfalls.
AI-written summary · about
chapters (11)
- 0:00Start
- 14:02Azure Portal
- 15:39Enterprise Applications
- 17:59Add a User
- 18:55Two-Factor Authentication
- 23:49Can I Trust My User
- 29:08What Is the I User Identifier in the Microsoft Token
- 36:18The Content of the Id Token Varies with the Identity Provider
- 36:55Issuer State
- 40:30There's any Frameworks I Would Recommend for Implementing Openid Connect in a New Application
- 41:27How Do You Get a Test User
related talks
54mWho's your user? OpenID from the ground-up
57mOpenID Connect Architectural Patterns
58mOAUTH, OPENID CONNECT & .NET – THE GOOD PARTS
19mImpress your enterprise customers with OpenID Connect login
31mOAuth 2.1 And OpenID Connect
28mOAuth 2.0 and OIDC
34mWho Are You? I Really Want to Know… the Magic Behind OIDC
48mThe Hows and Whys of Running Our Own OpenID Connect Identity Provider