3 ms·
They are authenticated via AAD and effectively serve various SSR web applications. You can't actually invoke our functions without passing authentication first.
by bob1029 3y ago
They are authenticated via AAD and effectively serve various SSR web applications. You can't actually invoke our functions without passing authentication first.
- deleted 3y ago[deleted]
- ttymck 3y agoI see. Where does authentication and authorization happen?
- bob1029 3y agoAuthentication occurs in the IdP (AAD). Authorization occurs within our application based upon claims returned by the IdP. We don't rely on any AD-specific mechanisms to authorize users (i.e. security groups). We associate application-specific roles with the user principal name in our database.