Latest Microsoft Entra ID topics

Learn about a feature that’s been in Microsoft Graph for a very long time. But it’s always surprising to me how many people aren’t aware of it.

It’s been a few years since I published my last SPFx wish list - this time I want to expand it to all Microsoft 365 development topics!

Developers can use the SharePoint Framework or Microsoft Teams apps for a new Microsoft 365 application. Compare the pros and cons of in this article.

Build document-centric apps in this step-by-step tutorial with SharePoint Embedded. Leverage SharePoint’s document libraries & more Microsoft 365 capabilities!

This is the definitive guide to the Microsoft 365 retirements announced in 2023: SharePoint Add-in model, SharePoint 2013 workflows, and Azure ACS.

Get started learning Microsoft 365 app development on the 5 most important workloads with my free guides! Over 5 hours of content & free resources!

Learn what I found while picking apart the latest SharePoint Framework (SPFx) release, v1.17. 40% more than what Microsoft shared in the official release notes!

Microsoft is retiring the MS-600 exam & Teams Developer Certification on March 31. In this article I’ll share the backstory & plans for my exam prep course.

In this article, learn about the new chapter I just added to my course, MS-600 Exam Prep | Building apps with Microsoft 365 Core Services.

In this article, learn about the latest November 2022 refresh to my course, MS-600 Exam Prep | Building apps with Microsoft 365 Core Services, and the recently refreshed chapters.

In this article, learn about the November 2022 updates to my course, MS-600 Exam Prep | Building apps with Microsoft 365 Core Services, and the new course subscription plan.

Nearly 2 years after the initial release of the MS-600 exam Microsoft released a major update on August 4, 2022, one packed with a ton of changes!

In episode 6 of CloudDev Clarity, Julie and Andrew share some of their favorite & most frequently used Azure resources, including why and how they use them.

Today I’m excited to share a new regular show: CloudDev Clarity. In this show, Julie Turner & Andrew Connell discuss topics for Microsoft 365 & Azure developers.

In this article, I show you how to use Github Actions to test an Azure Function App, as well as create all resources & deploy the code in a complete CI/CD process.

In this webinar, I’ll cover what’s new with the MS-600 exam today, and look forward to some changes we can expect Microsoft to make to the exam in the coming months. This is free webinar is ideal if you’re a Microsoft developer who’s interested in taking the MS-600 exam to become a certified Microsoft 365 Developer Associate ! Microsoft released a new certification in November 2020 for Microsoft 365 developers. The Microsoft 365 Certified: Teams Application Developer Associate certification measures developers across five (5) primary workloads in Microsoft 365.

Photo by Nathan Lemon on Unsplash In this post, I want to update you on some of the changes Microsoft has recently made related to the exam & offer guidance if you’re planning to take the exam soon. I’ll also answer a few common questions that keep coming up. We’re also looking at some more significant changes coming in 2022! While it’s too early to know exactly what will change, I’ve got a pretty good idea on the direction they’re going.

I’m excited to announce what’s in the latest refresh of my MS-600 exam prep course! New content, over 300 practice test questions and more!

In early September 2017, I announced Voitanos’ first course to be published. A little over three years later, I’m excited to share with you today the news on my next course that’s currently in the works!

In this course, another by me at Voitanos, you’ll get prepared to pass the MS-600 exam, the only Microsoft 365: Developer Associate certification prerequisite - includes 300+ practice questions!

Did you miss yesterday’s webinar on Microsoft Identity & Microsoft Entra ID in my ‘Get Microsoft 365 Dev Certified!’ series? No worries! It was recorded & you can watch it over on the Voitanos blog right now!

On Wednesday, April 22, I presented the webinar Get Certified! Overview of the MS-600 exam & Microsoft 365 Developer Associate Certification with Rencore & Waldek Mastykarz. Rencore has posted the recording of the webinar as well as a link to the slides if you weren’t able to join us live or you want to re-watch it. Click here to access the recording . In that webinar I hinted there was more coming - I’m excited to share with you a new webinar series I hosted in May 2020, and all the recordings are available now!

Join me in a webinar on April 22, 2020 and learn about the MS-600 exam you need to pass to achieve the Microsoft 365 Developer Associate certification. I’ll discuss what topics you need to have experience in and how you can best get yourself prepared to take and pass the MS-600 exam.

Many solutions involve creating web APIs to expose functionality to different clients and consumers. Developers can secure these APIs using Microsoft identity to ensure only approved apps can access the web APIs provided they’ve been granted the necessary permissions.

Role-based access control (RBAC) is a popular mechanism to enforce authorization in applications. The administrator assigns roles to different users and groups to control who can access to what content and functionality. Using RBAC with Application Roles and Role Claims, developers can securely enforce authorization in their apps with little effort on their part. Another approach is to use Microsoft Entra ID Groups and Group Claims.

The Microsoft identity platform implements the OAuth 2.0 authorization protocol. This protocol is a method that a third-party app can access web-hosted resources on behalf of a user. The web-hosted resources can define a set of permissions that you can use to implement functionality in smaller chunks. Developers can leverage one of two types of permissions supported by the Microsoft identity platform depending on the app scenario.

The Microsoft Identity platform enables developers to build many different types of applications to satisfy diverse business requirements and different scenarios. By supporting multiple OAuth 2.0 standard authentication protocols, developers can create different types of applications that meet business needs including single page applications, web apps, mobile or native apps, and services or daemon apps.

Microsoft identity platform is an evolution of the Microsoft Entra ID developer platform. It allows developers to build applications that sign in users, and access resources in both external applications such as Microsoft Office 365, the Azure portal, and thousands of other SaaS applications as well as internal resources, such as apps on your corporate network and intranet, along with any cloud apps developed by your own organization.

In my last post, Securing an Azure Function App with Microsoft Entra ID - Works with SharePoint Framework!, I showed how you can secure a REST API deployed as an Azure Function App using Microsoft Entra ID. This comes in quite handy when you want to secure some custom server-side business logic that’’s called from a SharePoint Framework (SPFx) client-side solution. The SPFx docs show how to use APIs with permissions to the Microsoft Graph. This post will explain how to add custom permissions to the AzureAD application that is used to secure your Azure Function.

In this post, I’ll explain how you can validate OAuth tokens generated by Microsoft Entra ID (AD) in your custom apps.

I recently published a new chapter in my Mastering the SharePoint Framework on-demand course for developers that included a section that showed how to call a REST API deployed using an Azure Function App and secured with Microsoft Entra ID from the SharePoint Framework. When I was working on this chapter, it felt like the process of configuring an Azure Function App to be secured with Microsoft Entra ID was harder and more complex than it should have been. Specifically, some of the things you do aren’t explained as well… so I decided to blog about it here!

Developers can declare permissions in SharePoint Framework projects, but it isn’t a good idea. In this article I explain why and suggest a better approach.

I’m excited to share this latest update to my course, Mastering the SharePoint Framework for developers. Today’s update, packaged as sprint 13, includes two new chapters and a few updates… and it’s a huge release… the biggest yet adding over 3 hours of new content! Sprint 13 also marks a milestone: the Fundamentals Bundle of the course is now content complete! This means all planned chapters are now published. I will continue to make edits to existing chapters updating content when circumstances warrant, but at this time no new chapters or lessons are planned.

I’ve seen more and more questions since the folks at npm added an automatic scan for vulnerabilities after every npm install. What’s going on? The npm registry runs a security audit on npm packages. With the release of npm v6, this command is run automatically when you execute an npm install on your project. You can manually run one of these audits by executing the command npm audit (ref: npm-audit docs ).

At Microsoft Build and Ignite, a Node.js web app demo integrated TypeScript, AzureAD, ADAL, & Office 365 APIs to run on any platform.

Explore the Client Credentials Grant Flow for Microsoft Entra ID - perfect for service apps with no user interaction.

Microsoft introduced ADAL JS, a library supporting OAuth2 implicit flow, allowing client-side solutions to leverage Microsoft Entra ID for authentication.

As an app developer, I share my interest in Microsoft Entra ID (formerly Azure AD) & OpenID Connect for app auth. Join my Pluralsight course to learn more.

Blog post discussing three OAuth2 authentication flows supported by Microsoft Entra ID: Authorization Code, Client Credentials, and Implicit Grant.

The authentication dance can be the hardest part of working with Office 365 APIs. Check out the Pluralsight course on authentication and discovery.

I discovered changes in the Azure portal Active Directory applet while getting screenshots, later clarified as hints of future updates.

Microsoft Entra ID (formerly Azure AD), supports two types of application authentication configurations - single and multi-tenant. Learn what’s different.

Learn from my experience as I share tips & insights on how to authenticate and obtain access tokens for Office 365 APIs.

Walkthrough leveraging Microsoft Entra ID Authentication Library & Open Web Interface for .NET to offload authentication to Microsoft Entra ID for web apps.

I discuss the importance of having a OAuth2 access token for Microsoft 365 and explain how to obtain it using Microsoft Entra ID.

Learn to manually create a Microsoft Entra ID app for Office 365 integration with Andrew Connell’s step-by-step guide.

The second post in a three-part series on creating an Azure app for Office 365 APIs using a wizard in Visual Studio 2013

My site offers tips and insights on Microsoft Entra ID and authentication for Office 365 APIs to help fellow developers navigate identity complexities.

Microsoft released Research Project Code Sample on OfficeDev Github, showcasing best practices for creating apps with Office 365 & SharePoint Online.