I am amazed that you can explain every step one has to take to get this to work but the Microsoft Employees that I talked to during my recent Cloud Consult sessions were not able to identify what I did wrong. Good job Erik!
These OAuth videos are so valuable resources Erik (especially for troubleshooting and seeing the setup in Azure step-by-step). I also love how you code it without some huge abstraction library package, just raw HTTP requests (and in such a few lines of code too, which you also explained). Every docs/example I've seen on these topics are so overwhelming while the concept is so simple (when you lay it down in this video). Many hours of researching turn into a simple 17 minute long video on youtube. Thanks again! :)
Good demo! One concern I have with OAuth in general though, is its reliance upon browsers which have the ability to memorize credentials. In the video for instance, you did not have to re-enter your credentials to sign in to Microsoft. That's fine if you are indeed the owner of the computer. If however someone else gets their hand on your device (which is not impossible) there'll be absolutely no reason for Microsoft to believe it's not you! This is a potential security vulnerability, especially when the third-party application wants access to sensitive data.
Hi Erik, Great video, as usual. I am looking for advice on authenticating users of on prem BC web client, via Open ID Connect where Azure is not an option. Can you point me in the right direction please?? Many thanks