For SSO login Azure is used in Angular secret key is not saved any where in Front End and...

We have used Azure for sso login in angular project. With keeping a auth config Json we execute it simply.

{
issuer: 'https://login.microsoftonline.com/{tenant-id}/v2.0',
redirectUri: window.location.origin,
clientId: `${environment.clientId}`,
responseType: 'code',
strictDiscoveryDocumentValidation: false,
scope: 'https://graph.microsoft.com/.default',
}


when click on sso button a redirct to microsoft link mentioned here and returns a token.It will send to backend in userinfo end point api the sends user data as response thus able to login This is the basic step we are doing here.So it a secure methode without keepoing secret key any where in project we are using azure.

We want to add cretificate based authentication for azure what all steps we hab=ve to do for it in both front end and backend

Continue reading...