Concepts Work @ YouTube: OAuth 2.0 Series / Openid

[LLMA-dot]

• [x] OAuth Protocol 1: Why should you use it?
• [x] OAuth Protocol 2: Roles / Client Registration
• [x] OAuth Review 1
• [x] OAuth Protocol 3: OAuth 2.0 Endpoints and Authorization Grant
• [x] OAuth Review 2
• [x] OAuth Protocol 4: OAuth 2.0 Authorization Code Flow | Microsoft Graph
• [x] OAuth Review 3
• [x] OAuth Protocol 5: OAuth 2.0 Client Credential Flow | Microsoft Graph
• [x] OAuth Review Final
• [x] Correct Documentation Template
• [x] OpenID Connect Authentication
• [x] OpenID Review
• [x] Openid Connect Authentication Flow /w Example
• [x] Add next video from Concepts Work to View List before closing task

Complete 1 video to reset Add Microsoft Graph Series from Concepts Work to Live Add another OAuth Task from ToDo to Live

[LLMA-dot]

Link to YouTube Playlist: https://www.youtube.com/playlist?list=PL8wOlV8Hv3o-a7GMEh5iZF21rD9nKtc7d

[LLMA-dot]

OAuth Protocol - Why you should you use it?

• OAuth is an AuthZ protocol.
• OAuth allows SCOPING which other traditional methods did not support. So you can (as an example) allow a user to access Email and Contacts of the Enterprise but not the Financial Records.
• With OAuth you can implement DELEGATION.
• User consent will be required for a client to access any information.
• OAuth introduces a layer for authZ at the Identity Provider Side.
• OAuth restricts the application to get unauthorized access.

[LLMA-dot]

OAuth Roles / Client Registration

Terminology in OAuth

• Application / Web Front End Server --> Client
• Resource Owners (Users)
• Resource (Contacts, User Attributes in Azure AD, etc)
• Resource Server --> Database Server
• AuthZ Server --> IdP

Client Type: Can be Confidential or Public

Client Profiles: Web Application, Native Client Application

[LLMA-dot]

OAuth 2.0 Endpoints and AuthZ Grant

< Diagram not included, check personal notes. >

• [x] Explain the flow of the diagram above.

The most important step in the whole process (according to Concepts Work) is the AuthZ Grant. Can you remember which one was in the diagram?

< Diagram not included, check personal notes. >

[LLMA-dot]

Follow-Up Task: Authentication Madness

• [x] Review OpenID Connect Joplin Notes
• [x] Research Fiddler (or open source alternative)
• [x] Add SAML Research Task to Todo (maybe book?)
• [x] Research OpenID & OAuth specifications
• [x] Research Bearer token specification
• [x] Update Github Repo

[LLMA-dot]

All tasks completed.