Please enable JavaScript.
Coggle requires JavaScript to display documents.
Azure Security - Coggle Diagram
Azure Security
RBAC
Security principal
Permission
Role definition
Scope
User Access Administrator
ACLs
Access ACLs
Default ACLs
authentication
Microsoft Identity Framework
JWT
token-based
Oauth 2.0
Resource owner
Resource server
Client
Authorization server/Identity provider
issues acces token to client
through
Azure Active Directory Identity Service
register on Azure Active Directory Tenant
Supported accounts types
from your organization only
from any organization
from Microsoft accounts
Platforms
iOS
Android
Desktop
Once yur app is registered, you'll get
Application (Client ID)
Redirect URI
Scenario URIs
Microsoft Authentication Library (MSAL)
Application management portal
Application configuration API and PowerShell
DevOps
OpenID Connect
form-based
stateful
dependency on cookies
difficult to scale
Azure Storage
Shared Key Authorization
Access to the entire Azure Storage Account and ssl its containers
Shared Access Signatures (SAS)
higger level of granularity
Types
Account level
Service Level
Only one service
Blob
Queue
Table
File Service
User Level
Only for Blob storage
Storage Access Policies