SpringOne Platform 2017 Yawei Wang, Microsoft Struggling to wire up enterprise grade authentication and authentication for your Spring Boot apps? In this live coding session, see how you can use Spring Security to enable Azure Active Directory authentication and authorization. You can walk away with everything you need for wiring up enterprise grade authentication.

1. Enable Authentication and Authorization with
Azure Active Directory and Spring Security
By Yawei Wang
Developer Division, Microsoft
yaweiw@Microsoft.com
1

2. Unless otherwise indicated, these slides are © 2013 -2016 Piv otal Software, Inc. and licensed under a
Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Agenda
2
• Introduction
• TODO App Authorization Flow
• TODO App Architecture
• Demo

3. Unless otherwise indicated, these slides are © 2013 -2016 Piv otal Software, Inc. and licensed under a
Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Authorization Flow
3
• Request:
https://login.microsoftonline.com/{tenant}/oauth2/a
uthorize?response_type=id_token&client_id=xxx&r
edirect_uri=http%3A%2F%2Flocalhost%3A8080%
2F&..
• Response: http://localhost:8080/#id_token={encod
ed JWT token}

4. Unless otherwise indicated, these slides are © 2013 -2016 Piv otal Software, Inc. and licensed under a
Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
TODO App
4
• Front-end (ADAL.js) + Web API (Spring)

5. Unless otherwise indicated, these slides are © 2013 -2016 Piv otal Software, Inc. and licensed under a
Creative Commons Attribution-NonCommercial license: http://creativecommons.org/licenses/by-nc/3.0/
Resources
5
• Azure Spring Boot Starters: https://github.com/Microsoft/azure-spring-boot
• Related sessions:
• Top Ways to Deliver Your Spring Code to the Cloud (Wed 11:30-12:00)
• Debugging Serverless for Cloud (Wed 3:20 – 3:50)
• Deploy and Scale Java Cloud Apps Using Spring Boot (Thur 10:30 – 11:40)