Microsoft 365 Community / Identity platform

Microsoft Identity Platform Community call delivered on June 15th.

Latest changes in token customization that include token claims issuance policy with editor (new) and added custom claims providers. Review optional claims, customizing ID and Access Tokens, adding additional claims, token overage claims, configure a group claim and groups coverage claims. Steps to process groups claim and app roles assigned to users. Should you really be customizing your tokens? Using Microsoft Graph instead of tokens, custom claim providers for data you cannot get from Graph using custom authentication extensions and single sign on – attributes and claims.

Presenter - Kyle Marsh, Principal Product Manager (Microsoft). The host of this call was Nandeesh Swami (Microsoft). Q&A takes place in chat and throughout call.

Agenda items
00:00 – Intro - Nandeesh Swami (Microsoft)
01:16 – Topic – Token Customization – Kyle Marsh | @kylemar, Principal Product Manager (Microsoft)
56:22 – Closing

Learn more
• Twitter https://twitter.com/microsoft365dev and @azuread
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/community/blog
• Microsoft 365 Unified Sample gallery - https://aka.ms/community/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/community/videos
• Microsoft 365 Platform Community - http://aka.ms/community/home
• Mark your calendar for next call on July 20th at 9:00am PT. Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Mastering Azure AD App Security: Safeguarding Service Principals for Smooth and Secure Automation. Specifically, permissions for DevOps and automation – background Services or Daemon applications. Descriptions and demos on: Service or daemon applications, app only vs delegated access, application vs service principal, app only permissions and Key Vault, app only access token, Microsoft Graph app permissions, Azure Active Directory scoping, no Graph app permissions, “user administrator” directory role, Custom role, Microsoft 365 scoping.

Topic presenter and call host - Marcus Carvalho (Microsoft). Call delivered on April 20, 2023. Questions addressed live and in chat throughout the call.

Agenda
00:00 – Intro - Marcus Carvalho (Microsoft)
03:09 – Topic – Mastering Azure AD App Security: Safeguarding Service Principals for Smooth and Secure Automation – Marcus Carvalho (Microsoft)
52:31 – Closing

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/community/blog
• Microsoft 365 Unified Sample gallery - https://aka.ms/community/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/community/videos
• Microsoft 365 Platform Community - http://aka.ms/community/home
• Mark your calendar for next call on April 20th at 9:00am PT. Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Staying Up to Date with Authentication for JavaScript Applications. Learn how your JavaScript web applications can benefit from leveraging the latest Microsoft Authentication Libraries (MSAL) features covering security, resiliency, and usability. as they are released. If your application is still on ADAL, migrating to MSAL will enable pro-active token refreshing, extended outage resiliency, and improved OIDC-compliant flows moving from implicit flow to auth code token.

Microsoft Presenters: Emily Lauber – Product Manager and Doğan Erişen - Software Engineer.

This call was hosted by Nandeesh Swami (Microsoft) | @Nandeesh_Swami on March 16, 2023. Questions addressed live and in chat throughout the call.

Agenda
00:00 – Intro - Nandeesh Swami (Microsoft) | @Nandeesh_Swami
01:04 – Topic – Staying up to date with authentication for JavaScript applications – Emily Lauber (Microsoft)
10:26 – Demo – Migrating your solutions from ADAL.js to MSAL - Doğan Erişen - (Microsoft)
35:24 – Q & A related to demo
51:49 – Closing

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/community/blog
• Microsoft 365 Unified Sample gallery - https://aka.ms/community/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/community/videos
• Microsoft 365 Platform Community - http://aka.ms/community/home
• Mark your calendar for next call on April 20th at 9:00am PT. Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Get your Apps ready for Zero Trust. Conditional access is the policy engine for zero trust architecture in Azure AD. It blocks or limits access to resources based on device information and other signals. Your app needs to send device information to Azure AD to fulfill the zero trust principle “verify explicitly”, which means using all data points for authentication and authorization. This session will teach you how to do that on various operating systems, browsers, native apps and brokers. Microsoft Presenter: Marcus Carvalho - Senior Product Manager (Microsoft) | @marcusca10. This call was hosted by Nandeesh Swami (Microsoft) | @Nandeesh_Swami on February 16, 2023.

Agenda
00:00 – Intro - Nandeesh Swami (Microsoft) | @Nandeesh_Swami
01:28 – Get your Apps ready for Zero Trust - Marcus Carvalho - Senior Product Manager (Microsoft) | @marcusca10
44:17 – Closing

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/community/blog
• Microsoft 365 Unified Sample gallery - https://aka.ms/community/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/community/videos
• Microsoft 365 Platform Community - http://aka.ms/community/home
• Mark your calendar for next call on March 16th at 9:00am PT. Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Productivity Tips for working with Microsoft Graph and Graph PowerShell.

Reviewed current tools and documents for working efficiently with Microsoft Graph and Graph PowerShell. Microsoft 365 Dev Tenant, Graph Explorer, Graph API Reference Docs, Graph Filter (retrieves subset of a collection), Graph X-Ray (view Graph API and PowerShell log of actions), Graph Permissions Explorer (APIs and data objects), Graph PowerShell, Upgrading from Azure AD PowerShell to Graph PowerShell – using Graph cmdlets map, Graph PowerShell Conversion Analyzer and PowerShell Azure Migration Advisor. Microsoft Presenter: Merill Fernando.

This call was hosted by Nandeesh Swami (Microsoft), on January 19, 2023.

Agenda
00:00 – Intro - Nandeesh Swami (Microsoft) | @Nandeesh_Swami
01:50 – Demo with Q&A - Productivity Tips for working with Microsoft Graph and Graph PowerShell - Merill Fernando - Senior Program Manager (Microsoft) | @merill
1:09:34 – Closing

Stay connected
• Twitter https://twitter.com/microsoft365dev and @azuread
• LinkedIn Nandeesh Swami | https://www.linkedin.com/in/nandeesh-s-301a7514/
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community
• YouTube https://aka.ms/M365DevYouTube (Developer channel)
• Blogs https://aka.ms/m365pnp/blog

👋 Join to our weekly Microsoft 365 & Power Platform Community calls to learn more. These are PUBLIC calls for you to get access on the latest details from Microsoft and to see awesome demos from community on these technologies - Download recurrent invites from https://aka.ms/community/calls

This month’s in-depth topic: Migrating an ASP.NET core application to MSAL from ADAL – A developer journey.

Azure Active Directory Authentication (ADAL) family of libraries are being depreciated (https://aka.ms/ADALPost). We have an advanced, modern, and more secure library - Microsoft Authentication Library (MSAL). Join this call to learn the migration journey, we will be migrating an ASP.NET core application, which is currently utilizing ADAL to MSAL, demonstrating a detailed code walk through and steps to be followed in the migration journey.

Microsoft Presenters: Kyle Marsh, Pramod HK, Jitesh Nair, and Bogdan Achim.

This call was hosted by Nandeesh Swami (Microsoft), on December 15, 2022.

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/m365/blog
• Mark your calendar for next call on January 19th at 9:00am PT. Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community

This month’s in-depth topic: Enable Single Sign-On on Android Apps using MSAL & also to secure it using Proof-of-Possession. Integrate Single Sign On (SSO) for users on an Android application with detailed code walk through on how to acquire an access token using Microsoft Authentication Library (MSAL) Android and further secure it using Proof-of-Possession (PoP). Overview of MSAL Android, SSO and PoP. Enabling single sign-on via Broker and via Browser, integrating with a broker and reviewing the need for PoP. Q&A. Microsoft Presenters: Neha Goel and Shane Oatman. This call was hosted by Nandeesh Swami (Microsoft) | @Nandeesh_Swami on November 17, 2022.

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/m365/blog
• Mark your calendar for next call on December 15th at 9:00am PT. Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community

This month’s in-depth topic: Deep dive on using MSAL Node to integrate Electron desktop applications with Azure AD. In this session, walk through steps required to integrate a cross-platform Electron desktop application with the Microsoft identity platform. Enable single sign-on (SSO) for users and get an access token for the Microsoft Graph API. Use the system browser for authentication, subscribe to MSAL events (for user sign-in and sign-out), cache tokens on disk and MSAL Node for desktop apps. Microsoft Presenters are Emily Lauber, Doğan Erişen and Salman Salem. This call was hosted by Nandeesh Swami (Microsoft) | @Nandeesh_Swami on October 20, 2022.

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/m365/blog
• Mark your calendar for next call on November 17th at 9:00am PT. Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community

This month’s in-depth topic: Understand the world of Azure AD extensions and their role in Application integration. Different organizations have different needs for user attributes and how they’re stored - on-premises and synched while others cannot be directly stored on-premise. Some attributes need to be stored as custom extensions, or MS Graph extensions, or sometimes stored as claims. Learn about types of extensions and how and when to use them in claims mapping policies or through our UX. Microsoft Presenters Jeevan Desarda and Allison Amaral. This call was hosted by Nandeesh Swami (Microsoft) | @Nandeesh_Swami on September 15, 2022. Questions addressed throughout the call.

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/m365/blog
• Mark your calendar for next call on October 20th at 9:00am PT. Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community

This month’s in-depth topic: Deep dive on using MSAL.js to integrate Angular single-page applications with Azure Active Directory. Integrate an Angular single page app with the Microsoft identity platform. Integrate single sign-on and get an access token for Microsoft Graph API. Coding walk-through includes subscribing to MSAL events, protecting routes using MSAL Angular Guard, and acquiring tokens with MSAL Angular Interceptor. See how apps can prepare themselves for Continuous Access Evaluation (CAE) events and deploying app on Azure Static App Service. Microsoft Presenters are Doğan Erişen, Salman Salem and Kalyan Krishna. Recorded August 18, 2022

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/m365/blog
• Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community

This month’s in-depth topic: Deep dive on using MSAL.js to integrate React Single-page applications with Azure Active Directory. Integrate a React single-page app with the Microsoft identity platform. Enable SSO and get an access token for Microsoft Graph API. Step through code for subscribing to MSAL events, protecting routes using MSAL React templates, and acquiring tokens with MSAL React hooks. Finally, how apps can prepare themselves for Continuous Access Evaluation (CAE) events and deploying app on Azure Static Web Apps service. Microsoft Presenters are Doğan Erişen, Salman Salem and Kalyan Krishna. Recorded July 21, 2022

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/m365/blog
• Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community

This month’s in-depth topic: Authentication in collaborative apps with Microsoft Teams and Microsoft Identity – Attend this session to learn how to provide users with the best user experience in your collaborative app. We will deep dive into how your app can build on Teams SSO and the Microsoft identity platform. We will also discuss how you can connect the Microsoft Identity of a user to your own user store. Presenter: Kyle Marsh - Principal Program Manager, Microsoft Entra - App Dev Architecture | @kylemar. Recorded June 16, 2022.

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/m365pnp/blog
• Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community

This month’s in-depth topic: Microsoft Graph’s advanced capabilities for querying directory objects – Microsoft Graph APIs expose Directory Objects (Users, Groups, Devices, etc.) to interact with Azure AD. Learn how to unlock the full potential of our Directory Object APIs using the Advanced Query Capabilities that allow developers to Count, Filter, Search and Sort Directory Objects on more properties with more OData operators. We cover - what are advanced query capabilities, architecture, walkthrough assorted query examples and SDK support (PowerShell, .NET), call out current limitations and conclude with Q&A. Presenter: Luca Spolidoro – Senior Program Manager, Azure Identity | @Licantrop0. Recorded May 19, 2022.

Learn more
• See the full blog post for this call in the Microsoft 365 platform community blog - https://aka.ms/m365pnp/blog
• Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365/community

This month’s in-depth topic: Securing your Java Web Apps and APIs with Microsoft Identity - the Microsoft Authentication Library for Java enables applications to integrate with the Microsoft identity platform. It allows you to sign in users or apps with Microsoft identities (Azure AD, Microsoft accounts and Azure AD B2C accounts) and obtain tokens to call Microsoft APIs such as Microsoft Graph or your own APIs registered with the Microsoft identity platform. It is built using industry standard OAuth2 and OpenID Connect protocols. Presenter Didun Ayodeji – Program Manager, Microsoft Identity. Recorded April 21, 2022.

Learn more
• See the full blog post for this call at: https://aka.ms/m365pnp/community/blog
• Download the recurrent invite for this call | https://aka.ms/IDDevCommunityCalendar
• Microsoft 365 Unified Sample gallery - https://aka.ms/m365/samples
• Microsoft 365 Platform Community in YouTube - https://aka.ms/m365/videos
• Microsoft 365 Platform Community - http://aka.ms/m365pnp

This month’s in-depth topic: Optimize Authentication and Authorization in your web apps and web APIs using Microsoft Identity Web - optimize Authentication and Authorization in your web apps and web APIs using Microsoft Identity Web. Microsoft Identity Web is a set of ASP.NET Core libraries that simplifies adding authentication and authorization support to web apps and web APIs integrating with the Microsoft identity platform. It provides a single-surface API convenience layer that ties together ASP.NET Core, its authentication middleware, and the Microsoft Authentication Library (MSAL) for .NET. Presenter Rinki Bera – Program Manager, Microsoft Identity. Recorded March 17, 2022.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube (Developer channel) and https://aka.ms/m365pnp/videos (Community channel)
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar
• Join us for the next Microsoft Identity Platform community call on April 21st at 9:00am PT

This month’s in-depth topic: Access Azure resources from software workload in different environments, no secrets necessary. When applications or services run in environments outside Azure, they need Azure AD application secrets to authenticate to Azure AD and access resources such as Azure and Microsoft Graph. These secrets pose a security risk if they are not stored securely and rotated regularly. Azure AD workload identity federation removes the need for these secrets in selected scenarios. Join this session to learn how you can use this capability to get rid of secrets in your scenario. Presenter Uday Hegde – Architect, Microsoft Identity | @udayxhegde. Recorded February 17, 2022.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube (Developer channel) and https://aka.ms/m365pnp/videos (Community channel)
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar
• Join us for the next Microsoft Identity Platform community call on March 17th at 9:00am PT

This month’s in-depth topic: Secure DevOps with the Microsoft Identity platform. Build, deploy and run code and infrastructure without exposing sensitive information such as keys or secrets. Any platform, any language! This session was delivered by Christos Matskas - Sr Program Manager (Microsoft) | @ChristosMatskas. Recorded January 20, 2022. Q&A in chat and at end of call.

Stay connected – (all groups) (Blog and YouTube posts)
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube (Developer channel) and https://aka.ms/m365pnp/videos (Community channel)
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar
• Join us for the next Microsoft Identity Platform community call on February 17th at 9:00am PT

This month’s in-depth topic: A Zero Trust primer for developers. Introduces core Zero Trust principles and why developers’ participation is critical in supporting the IT Group’s Zero Trust policy rollouts. Steps a developer can follow for building a good Zero trust ready app are outlined. Notably verifying callers explicitly using the various claims in the token and adopting Continuous Access Evaluation (CAE). Recommendations for enabling least privilege and tips to swiftly recover from breaches. Next step – get this ebook aka.ms/ztdev covering Zero Trust principles. This session was delivered by Kalyan Krishna - Microsoft. Recorded December 16, 2021. Q&A throughout call.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube (Developer channel) and https://aka.ms/m365pnp/videos (Community channel)
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar
• Next call: January 20th at 9:00am PT

This month’s in-depth topic: Protect your brand with Azure Active Directory B2C and Zero Trust Security. Overview of B2C protection capabilities in Azure and Dynamics 365. Azure AD External Identities – P1 and P2. Enabling P2, collaboration with external partners and engaging with customers with Azure AD B2C. Setting up User flows and custom policies. Reviewing Microsoft CIAM, Azure Front Door, Conditional Access + Identity Protection for Azure AD B2C and Dynamics 365 Fraud Protection Account Protection. This session was delivered by Christer Ljung – Principal Program Manager, Microsoft Identity Engineering. Recorded November 18, 2021. Q&A in chat and at end of call.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube (Developer channel) and https://aka.ms/m365pnp/videos (Community channel)
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Azure AD Verifiable Credentials - how to get started with Request API. In this session, we will share the latest update around public preview of the Request Service API. Developers can start using the new Request Service API to easily build applications that can issue, verify credentials from any programming language of choice. Sequence flow diagrams and 3 demos - Verifiable Credentials, .NET sample, Using the Request API with Postman, discussed. This session was delivered by Microsoft Identity and Network Access Program Managers Matthijs Hoekstra and Rohit Gulati. Recorded on October 21, 2021. Q&A in chat and live at end of call.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube (Developer channel) and https://aka.ms/m365pnp/videos (Community channel)
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar
• Next call: November 18th at 9:00am PST

This month’s in-depth topic: Hiding in the Clouds: How attackers can use applications for sustained persistence and how to find it. In this session - What is application consent and why should you care (terms, user experience, applications and service principals, threats), Key permissions to look for (what permissions, what impact), How to investigate consent grants (discovery, IOCs, investigation), and Best practices to protect yourself from app consent attacks (policies, consents, risky OAuth apps, overprivileged apps, go-dos, resources). This session was delivered by Microsoft Program Managers Mark Morowczynski and Bailey Bercik. Recorded on September 16, 2021. Q&A last 10 minutes and in chat throughout call.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube (Developer channel) and https://aka.ms/m365pnp/videos (Community channel)
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: From zero to hero with Microsoft Graph API. This session opens with an overview of Microsoft Graph services and Microsoft Graph Explorer tool. Presenter dives into access and permissions - source and access tokens, and REST API for CRUD operations including querying examples – filter, select, paging, batching, and throttling in Graph Explorer. Substantive review of metadata (queryable resources and their JSON structure, types, properties…), and options for automation & DevOps (app registration, OAuth, policies, deployment). Session was delivered by Microsoft Program Managers Christer Ljung and Rohit Gulati. Recorded on July 15, 2021. Live and in-chat Q&A throughout call.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Increase the resilience of authentication and authorization applications you develop. Tips for adding and increasing resiliency in apps that sign-in users and apps without users. Using a Microsoft Authentication Library and best practices to follow if you use a different library. Authorization with JWT and using Microsoft Continuous Access Evaluation (CAE). Demo and tips on evaluating/adopting CAE. Resilient methods for fetching metadata and validating tokens including use of customized token validation, as needed. This session was delivered by Microsoft Program Managers Harish Suresh | @harish_suresh and Kyle Marsh | @kylemar and was recorded on June 17, 2021.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Using Conditional Access Auth Context in your app for step-up authentication. Use the Microsoft Azure AD Conditional access engine’s new Auth Context feature to trigger a demand for step-up authentication, like MFA, from within your application and services. This capability helps developers build low friction user experiences for some parts of their application, while keeping access to more secure operations and data behind stronger authentication controls. Learn how to enable these scenarios in this session. Microsoft Program Manager presenters – Caleb Baker and Kalyan Krishna. This session was recorded on May 20, 2021. Live and in-chat Q&A throughout call.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube
• Blogs https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Get change notifications delivered via Azure Event Hubs. Brief introduction to Microsoft Graph change notifications (WebHooks) followed by a change notifications delivered via Azure Event Hubs demo. This new Microsoft Graph platform capability gives developers using change notification features in Microsoft Graph the option to get change notifications delivered to their applications more quickly and at scale using Azure Event hub. An end-to-end demo steps viewers through provisioning and configuration of all necessary resources. Microsoft Program Manager presenters - George Juma and Kalyan Krishna. This session was recorded on April 15, 2021. Live and in chat Q&A throughout call.

Stay connected:
• Twitter https://twitter.com/microsoft365dev and @azuread
• YouTube https://aka.ms/M365DevYouTube
• Blogs https://aka.ms/M365DevBlog and https://aka.ms/m365pnp/community/blog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar

This month’s in-depth topic: Microsoft Identity platform – Do’s and Don’t. Covers Microsoft Identity platform for developers (build applications and integrate identity with one unified toolkit), Microsoft Authentication Libraries (JS, .NET, Android, iOS, Python, Java, Angular, Microsoft Identity Web), and top developer mistakes seen on the Microsoft Identity platform. Microsoft Program Manager presenters - Harish Suresh | @harish_suresh and Sahil Malik | @sahilmalik. This session was delivered and recorded on March 18, 2021. Q&A in chat throughout call.

Stay connected:
• Twitter https://twitter.com/microsoft365dev
• YouTube https://aka.ms/M365DevYouTube
• Blogs https://aka.ms/M365DevBlog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar

This month’s featured topic: Increasing the resilience of the authentication and authorization applications you develop. 2 scenarios discussed - Apps that sign in users and Apps without users. Bottom line - use MSAL. Fundamentally, the frequency of making token calls affects your application’s resiliency. MSAL makes your apps more resilient by proactively refreshing tokens at the right time. General recommendations - develop apps that are Continuous Access Evaluation (CAE) ready, serialize and persist tokens, acquire tokens silently, handle service responses properly, use broker authentication on mobile devices, evaluate authorization options. This session delivered by Kyle Marsh (Microsoft) | @kylemar, was recorded on February 18, 2021.

Resources:
• Documentation - Building Resilience into identity and access management with Azure Active Directory | Building resilient identity and access management with Azure Active Directory | Microsoft Docs
• Documentation - Build resilience in your identity and access management infrastructure | Build resilience in your IAM infrastructure with Azure Active Directory | Microsoft Docs
• Documentation – Build resilience in your customer identity and access management with Azure Active Directory B2C | Build resilience in Customer Identity and Access Management using Azure AD B2C | Microsoft Docs
• Documentation – Increase resilience of authentication and authorization applications you develop | Increase resilience of authentication and authorization applications you develop - Microsoft identity platform | Microsoft Docs
• Documentation - How to use Continuous Access Evaluation enabled APIs in your applications | https://aka.ms/clientcae

Stay connected:
• Twitter https://twitter.com/microsoft365dev
• YouTube https://aka.ms/M365DevYouTube
• Blogs https://aka.ms/M365DevBlog
• Recurrent Invite https://aka.ms/IDDevCommunityCalendar

In this month's call, James Mantu (Microsoft) shares an overview of the new offerings in MSAL.js for React and Angular developers now in public preview.

For more information, visit https://developer.microsoft.com/en-us/identity

Stay connected
Twitter https://twitter.com/microsoft365dev
YouTube https://aka.ms/M365DevYouTube
Blogs https://aka.ms/M365DevBlog

Authentication to applications aimed at customers and partners requires zero trust levels of security, while demanding UX and controls flexibility to fit diverse customer audiences. In this session we review how to assess the risk status of your applications using Identity Protection and how to control access with smart conditional policies leveraging real time risk assessments.

Speakers: Jose Rojas, Vikas Deora

For more information, https://developer.microsoft.com/en-us/identity/

Stay connected
Twitter https://twitter.com/microsoft365dev
YouTube https://aka.ms/M365DevYouTube
Blogs https://aka.ms/M365DevBlog

The Microsoft identity platform issues openid connect compliant tokens by default. You can choose to surface up custom claims in the issued tokens, and use those custom claims to make various decisions in your applications, such as authorization, lighting up different parts of the UX etc. In this month's call, learn from Sahil Malik how easy it is to customize the claims issued by AAD, and how your applications can benefit from it.

For more information, please visit
https://developer.microsoft.com/en-us/identity

To join additional monthly calls, download the calendar series at
https://aka.ms/IDDevCommunityCalendar

Stay connected
Twitter https://twitter.com/microsoft365dev
YouTube https://aka.ms/M365DevYouTube
Blogs https://aka.ms/M365DevBlog

This month's community call covered App Roles to manage authorization in your application including what is Authentication and Authorization, why Authorization is important, Groups vs Roles, AppRole - Users/Groups and
AppRoles for single tenant and multi-tenant apps.
Speakers: Jeevan Desarda, Saurabh Madan

Get started with App Roles https://aka.ms/AAa11te

Stay connected
Twitter https://twitter.com/microsoft365dev
Blogs https://aka.ms/M365DevBlog

This month's community call included an introduction to Microsoft.Identity.Web, the new authentication & token management experience for .NET. We'll show how it fits within the existing landscape, look at demos of using the library in new apps, and strategies for upgrading older apps.
Speakers: Christos Matskas, John Patrick Dandison

Stay connected
Twitter https://twitter.com/microsoft365dev
YouTube https://aka.ms/M365DevYouTube
Blogs https://aka.ms/M365DevBlog

In this month's call you will learn about the MSAL and Microsoft Graph features in Microsoft identity platform that are now GA plus end of support timelines for ADAL and Azure AD Graph API.
Speakers: Aisha Wang, Dan Kershaw, Ric Lewis, Luca Spolidoro

Resources
MSAL & Microsoft Graph blog https://aka.ms/AA9d8f4
Migration https://aka.ms/AA9doj8

Stay connected
Twitter https://twitter.com/microsoft365dev
Blogs https://aka.ms/M365DevBlog

In this month's Microsoft identity platform call, Matthijs Hoekstra, Program Manager, goes into detail about Decentralized Identities and shares scenarios you can build with it.

Resources
View presentation https://aka.ms/AA918um
White paper aka.ms/didwhitepaper
Docs aka.ms/opendid

Stay connected
Twitter https://twitter.com/microsoft365dev
YouTube https://aka.ms/M365DevYouTube
Blogs https://aka.ms/M365DevBlog

In May's Microsoft identity platform call, Navya Canumalla went into detail on MSAL Java and Python, including an overview, supported scenarios and calling patterns. Quickstart demo, token cache and ADAL to MSAL migration.
View presentation deck https://aka.ms/AA8kgjl

Resources:
MSAL Java https://aka.ms/msaljavadocs
MSAL Python https://aka.ms/msalpythondocs

Stay connected
Twitter https://twitter.com/microsoft365dev
YouTube https://aka.ms/M365DevYouTube
Blogs https://aka.ms/M365DevBlog

In the March community call, we discussed some of the improvements to the Azure Portal App registration. Included in this are the new quickstarts, end of life app registrations, per-application RBAC and token configuration.

Documentation https://aka.ms/AA7yo21
End of life app registration blog https://aka.ms/AA7wu1c
Get started with Microsoft identity platform https://aka.ms/AA7yqha

Stay connected:
Twitter https://twitter.com/microsoft365dev
YouTube https://aka.ms/M365DevYouTube
Blogs https://aka.ms/M365DevBlog

In this month's Microsoft identity platform community call, Kyle Marsh, Principal Program Manager at Microsoft, shared the golden rules for tokens:
-Use tokens only for their intended function
-Never mess with someone else's tokens
-Cache the tokens appropriately
-Check for error classes instead of search for specific error codes

ID Tokens - https://docs.microsoft.com/en-us/azure/active-directory/develop/id-tokens
Access Tokens - https://docs.microsoft.com/en-us/azure/active-directory/develop/access-tokens
More on Microsoft identity platform for developers - https://developer.microsoft.com/en-us/identity

Kyle Marsh, Principal Program Manager, kicked off the 2020 developer community call series with an in-depth discussion on best practices for developers on the Microsoft identity platform.

For more information, please visit https://developer.microsoft.com/en-us/identity