Federated access from Azure to other clouds without a secret

1. Federated access from Azure to
other clouds without a secret
Darek Dwornikowski

6. Enter Open ID Connect (OIDC)
• OAuth 2.0 is a security standard where
you give one application permission to
access your data in another application
on your behalf, without giving them
your password.
• OIDC adds identity part on top of OAuth,
session etc (identity providers)
• You can do it for machine too. All you
need is trust.

7. What we will do

8. Our flow

9. Links
• https://developer.okta.com/blog/2019/10/21/illustrated-guide-to-oauth-and-oidc
• https://youtu.be/t18YB3xDfXI
• https://gist.github.com/tdi/791e660027340dbc09da5f791c7b5661
• https://cloud.google.com/iam/docs/configuring-workload-identity-federation#azure
• https://learn.microsoft.com/en-au/azure/active-directory/develop/howto-create-
service-principal-portal
• https://learn.microsoft.com/en-au/azure/active-directory/develop/howto-create-
service-principal-portal#register-an-application-with-azure-ad-and-create-a-service-
principal
• https://medium.com/google-cloud/configuring-workload-identity-federation-with-azure-
672a1e1f3eec
• jwt.ms

10. Thanks J let’s stay connected
@7d1 https://www.linkedin.com/in/darekd/