Talk for Bay.Net (San Francisco) June 18th, 2014 http://www.meetup.com/BayNET/events/185540132/ Avoid all the security issues of maintaining your own password storage and authentication with or without having your web site hosted on Azure. That is, allow your users to be able to login to your site by authenticating with Google, Facebook, Yahoo or Windows Live authorization services. In this presentation, I’ll show you how, with Azure Mobile Services and very simple API calls you can create that authentication.

1. Peter Kellner
•Microsoft MVP 7Years
•SiliconValley Code Camp
Organizer
•Pluralsight Author
•Independent

2. Add Login via Google,
Facebook,Yahoo or
LIVE using Azure
Mobile Services

3. PLEASE LOGINTO
W.SVCC.MOBI
alias for www.siliconvalley-codecamp.com

4. SVCC WalkThrough

5. Problems?
• User Logs In Without First Linking
• Multiple Accounts (me!)
• Cookies?

6. IDENTITY BASICS
• I’m struggling to understand how to integrate these oauth
providers into my sites. If all we get back is a token with no
other identifiable information, how does this help us? It
seems that all we are getting is the ability for a bad guy to
consistently identify himself to us with no other way of
telling who he is. Just, “same old bad guy is back”.
Yes, that’s pretty much OAuth in a nutshell. You
get a consistent identifier per user. The format of
that identifier is up to the provider. You may, or
may not, get additional information, in the token,
or via a side channel.

7. UNIQUE NUMBER UNIQUE?
• My APP
• YourAPP
• SAME UNIQUE NUMBER?

8. INFORMATION FLOW
Issue RequestTo Identity Provider
Get Back Big Number String

9. What is Azure Mobile Services?
•Web Site? (NO!)
•Tables, Blobs, Queues, Auth

10. Portal RunThrough
Creating Azure Mobile Service
With Identities

11. Windows Azure Portal

12. Azure Mobile Services Setup

13. Azure Mobile Services Setup

14. Azure Mobile Services Setup

15. Azure Mobile Services Setup

16. Azure Mobile Services Setup

17. Azure Mobile Services Setup

18. Azure Mobile Services Setup

19. Creating Apps

20. Creating Apps

21. No Help From Sample App
http://msdn.microsoft.com/en-
us/library/azure/jj710105.aspx

22. Service-Directed Login

23. CodeTime!
• DemoTestOAuth.html

24. Service-Directed Login

25. Service-Directed Login

26. Service-Directed Login

27. Service-Directed Login

28. Client-Directed Login
If your app doesn’t need to interact
directly with the identity provider,
you can instead use the Service-
directed login operation

29. SVCC Implementation

31. Extended OAuth Info
http://blogs.msdn.com/b/carlosfigueira/archive/2013/12/12/
expanded-login-scopes-in-azure-mobile-services.aspx

32. Carlos Figueira Blog

34. NodeJS Discussion
• Azure Mobile Service Integration
• Requires
• GIT

35. Azure Mobile ServiceAPI Calls