The document discusses Microsoft Graph and Azure Active Directory authentication. It provides an overview of Microsoft Graph REST API and demonstrates how to make REST calls using Postman. It also covers how to protect a web application using Azure AD authentication and connect to Microsoft Graph using PowerShell. The presentation was given at the Dakar SharePoint Saturday on July 14, 2018.

1. Microsoft Graph: Azure AD Authentication
Gora LEYE, Solution Architect/Developper, MVP
#SPSDakar
14/07/2018
Edge-LCIT km 4,5 Route de Ouakam, en face de la Librairie 4 Vents
Ave Cheikh Anta Diop, Dakar, Sénégal

2. About Me
Gora LEYE
Solution Architect/Developer
Twitter : @logcorner
Email : tocane.technologies@gmail.com
LinkedIn : https://www.linkedin.com/in/gora-leye-21579753/
Blog : http://logcorner.com
Paris, France

3. Agenda
14/07/2018 Dakar SharePoint Saturday
1. Microsoft Graph​ REST API
2. Graph API Explorer​
3. Azure Active Directory
4. Make Rest Call Using Postman​
5. Protect a web application using Azure AD​
6. Connect with Microsoft Graph using PowerShell​

4. Microsoft Graph REST API
14/07/2018 Dakar SharePoint Saturday

5. USER

6. Code
GET https://graph.microsoft.com/v1.0/users/yina@contoso.com
GET https://graph.microsoft.com/v1.0/me
GET https://graph.microsoft.com/v1.0/contoso.com
/users/<id>
GET https://graph.microsoft.com/v1.0/contoso.com
/users/yina@contoso.com?$select=aboutMe
GET https://graph.microsoft.com/v1.0/me/photo

7. manager
directReports
GROUPS
memberOf
USER
/users

8. Code
GET https://graph.microsoft.com/v1.0/me/manager
GET https://graph.microsoft.com/v1.0/contoso.com
/users/yina@contoso.com/directReports
GET https://graph.microsoft.com/v1.0/me/memberOf
GET https://graph.microsoft.com/v1.0/users/<id>
GET https://graph.microsoft.com/v1.0/contoso.com/users/<id>/photo

9. manager
directReports
GROUPS
memberOf
/messages
MESSAGES
USER

10. Code
GET https://graph.microsoft.com/v1.0/me/messages
GET https://graph.microsoft.com/v1.0/me/messages?$top=5
GET https://graph.microsoft.com/v1.0/me
/messages?$top=5&$skip=5&$orderby=DateTimeCreated
GET https://graph.microsoft.com/v1.0/me
/messages?$top=5&$select=Subject,Sender&
$search="from:alexd@contoso.com"

11. MESSAGES
manager
directReports
GROUPS
memberOf
/events
MESSAGES
EVENTS
USER

12. Code
GET https://graph.microsoft.com/v1.0/me/events
GET https://graph.microsoft.com/v1.0/me/events?$top=5
GET https://graph.microsoft.com/v1.0/me
/calendarview?startdatetime=2015-04-01t01:00:00z
&enddatetime=2015-04-16t23:00:00z

13. EVENTS
MESSAGES
manager
directReports
GROUPS
memberOf
/drive
EVENTS
Shared with me
modifiedBy
FILES
createdBy
directReports
USER
public

14. Code
GET https://graph.microsoft.com/v1.0/me/drive/root/children
GET https://graph.microsoft.com/v1.0/me/drive/items/<id>
GET https://graph.microsoft.com/v1.0/me
/drive/items/<id>/lastModifiedByUser
GET https://graph.microsoft.com/v1.0/mary@contoso.com/drive
/root/children
GET https://graph.microsoft.com/v1.0/mary@contoso.com
/drive/items/<id>/lastModifiedByUser/manager

15. trendingAround
trendingAround
directReports
workingWith
workingWith
createdBy
FILES
CONVERSATIONS
EVENTS
GROUPS
memberOf
directReports
Shared with me
modifiedBy
FILES
createdBy
directReports
public
EVENTS
MESSAGES
manager
GROUPS
memberOf
/tasks
TASKS
TASKS
GROUPS
memberOf
trendingAround
trendingAround
directReports
USER

16. Code
GET https://graph.microsoft.com/beta/me/tasks
GET https://graph.microsoft.com/beta/contoso.com
/users/yina@contoso.com/tasks
GET https://graph.microsoft.com/beta/contoso.com
/groups/<id>/tasks

17. TASKS
manager
memberOf
FILES
MESSAGES
workingWith
Shared with me
directReports
createdBy
FILES
CONVERSATIONS
createdBy
workingWith
EVENTS
trendingAround
GROUPS
TASKS
NOTES
NOTES
public
modifiedBy
USER
trendingAround
API
https://blogs.msdn.microsoft.com/aadgraphteam/2016/07/08/microsoft-graph-or-azure-ad-graph/

18. Graph API Explorer
CREATE A DEVELOPPER ACCOUNT
➢ https://developer.microsoft.com/en-us/office/dev-program
14/07/2018 Dakar SharePoint Saturday

19. Graph API Explorer
14/07/2018 Dakar SharePoint Saturday
➢ https://developer.microsoft.com/en-us/graph/graph-explorer

20. Demo
https://developer.microsoft.com/en-us/office/dev-program
https://developer.microsoft.com/en-us/graph/graph-explorer

21. Azure Active Directory
14/07/2018 Dakar SharePoint Saturday
Azure Active Directory (Azure AD) is Microsoft’s multi-tenant, cloud-
based directory, and identity management service that combines core
directory services, application access management, and identity
protection into a single solution
https://docs.microsoft.com/en-us/azure/active-
directory/fundamentals/active-directory-whatis

22. Azure Active Directory
14/07/2018 Dakar SharePoint Saturday

23. Azure Active Directory
• Web browser to web application: A user needs to sign in to a web
application that is secured by Azure AD.
• Single Page Application (SPA): A user needs to sign in to a single page
application that is secured by Azure AD.
• Native application to web API: A native application that runs on a phone,
tablet, or PC needs to authenticate a user to get resources from a web API
that is secured by Azure AD.
• Web application to web API: A web application needs to get resources
from a web API secured by Azure AD
• Daemon or server application to web API: A daemon application or a
server application with no web user interface needs to get resources from
a web API secured by Azure AD
14/07/2018 Dakar SharePoint Saturday

24. Azure Active Directory
14/07/2018 Dakar SharePoint Saturday
Web browser to web application

25. Azure Active Directory
14/07/2018 Dakar SharePoint Saturday
Single Page Application (SPA)

26. Azure Active Directory
14/07/2018 Dakar SharePoint Saturday
Native application to web API

27. Azure Active Directory
14/07/2018 Dakar SharePoint Saturday
Web application to web API

28. Make Rest Call Using Postman
1. Prerequisites
• Office 365 tenancy
• Postman - only the free version is needed for this lab
2. Register an Azure AD web application with the App Registration Portal
14/07/2018 Dakar SharePoint Saturday

29. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Register an Azure AD web application with the
App Registration Portal

30. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Register an Azure AD web application with the
App Registration Portal

31. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Register an Azure AD web application with the
App Registration Portal

32. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Register an Azure AD web application with the
App Registration Portal

33. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Register an Azure AD web application with the
App Registration Portal

34. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Register an Azure AD web application with the
App Registration Portal

35. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Generate key

36. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Select required permissions

37. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Select required permissions

38. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Select required permissions

39. Make Rest Call Using Postman
14/07/2018 Dakar SharePoint Saturday
Select required permissions

40. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
APPLICATION PERMISSIONS
Azure AD Identity and OAuth2 access token
request

41. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
Azure AD Identity and OAuth2 access token request

42. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
Decode Access Token using JWT.IO

43. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
Get List Users

44. Make Rest Call Using postman
• https://login.microsoftonline.com/f098c861-53e3-
482f-9e13-
8e3457ba7b36/oauth2/v2.0/authorize?client_id=0757
e8c6-f86e-4db9-912c-
5ad744e0094c&response_type=code&redirect_uri=ht
tps%3A%2F%2Flocalhost%3A44398&response_mode=
query&scope=openid%20https%3A%2F%2Fgraph.micr
osoft.com%2Fuser.read%20https%3A%2F%2Fgraph.mi
crosoft.com%2Fcalendars.read&state=12345
• Open a browser.
• Past the URL into the browser.
• When prompted to login, use your Work or School
account
14/07/2018 Dakar SharePoint Saturday
DELEGATED PERMISSIONS
Obtaining an Azure AD OAuth2 authorization code

45. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
Get credentials

46. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
Accept consent

47. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
Retrieve authorization code

48. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
OAuth2 access token request by authorization code

49. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
Decode Access Token using JWT.IO

50. Make Rest Call Using postman
14/07/2018 Dakar SharePoint Saturday
Get List Messages

51. Demo

52. Protect a web application using Azure AD
14/07/2018 Dakar SharePoint Saturday
Azure AD Settings

53. Protect a web application using Azure AD
14/07/2018 Dakar SharePoint Saturday
Azure AD OpenIdConnect Authentication

54. Protect a web application using Azure AD
14/07/2018 Dakar SharePoint Saturday
Azure AD Sign In and Sign Out

55. Call MsGraph using asp.net core web app
14/07/2018 Dakar SharePoint Saturday
Azure AD Get List Users Required Permissions

56. Call MsGraph using asp.net core web app
14/07/2018 Dakar SharePoint Saturday
Azure AD Request infos

57. Call MsGraph using asp.net core web app
14/07/2018 Dakar SharePoint Saturday
APPLICATION PERMISSIONS
Azure AD get list users

58. Call MsGraph using asp.net core web app
14/07/2018 Dakar SharePoint Saturday
DELEGATED PERMISSIONS
Get List messages : required permissions

59. Call MsGraph using asp.net core web app
14/07/2018 Dakar SharePoint Saturday
DELEGATED PERMISSIONS
Get List messages : enable permissions

60. Call MsGraph using asp.net core web app
14/07/2018 Dakar SharePoint Saturday
DELEGATED PERMISSIONS
Get List messages

61. Demo

62. Connect with Microsoft Graph using
PowerShell
1. Install Powershelget using package Management MSI
• https://www.microsoft.com/en-us/download/details.aspx?id=51451
1. Modules installation
• https://www.powershellgallery.com/packages/PowerShellGet/1.6.5
14/07/2018 Dakar SharePoint Saturday
connect to Azure Active Directory

63. Connect with Microsoft Graph using
PowerShell
14/07/2018 Dakar SharePoint Saturday
Modules installation

64. Connect with Microsoft Graph using
PowerShell
• Install-Module -Name AzureAD
14/07/2018 Dakar SharePoint Saturday

65. connect to Azure Active Directory
14/07/2018 Dakar SharePoint Saturday
Get Credentials
$credential = Get-Credential

66. connect to Azure Active Directory
• Connect-AzureAD -Credential $credential
14/07/2018 Dakar SharePoint Saturday
Use Credentials

67. connect to Azure Active Directory
14/07/2018 Dakar SharePoint Saturday
Use Credentials

68. Connect to SharePoint Online
14/07/2018 Dakar SharePoint Saturday
https://www.microsoft.com/en-ca/download/details.aspx?id=355

69. Connect to SharePoint Online
#Get Connection Credential
• $credential= get-credential
#Establish Connection
• Connect-SPOService -Url https://<SP Admin Center>.sharepoint.com
-credential $credential
• Multifactor authentification : Connect-SPOService -Url https://<SP
Admin Center>.sharepoint.com
• Connect-SPOService -Url https://logcorner-admin.sharepoint.com -
credential $credential
14/07/2018 Dakar SharePoint Saturday

70. Connect to SharePoint Online
14/07/2018 Dakar SharePoint Saturday

71. Demo
✓ $credential = Get-Credential
✓ leyegora@logcorner.onmicrosoft.com
✓ Connect-AzureAD -Credential $credential
✓ Connect-SPOService -Url
https://logcorner-admin.sharepoint.com
-credential $credential
✓ Get-SPOSite
✓ Disconnect-SPOService
✓ Disconnect-AzureAD

72. Merci à nos sponsors !