PM.Readme chain for #229

[skgithubtest[bot]]

Create a ToDo Application using the STUDENT App Catalog group in C#

[skgithubtest[bot]]

ToDo Application README

Overview

The ToDo Application is a robust task management solution designed for enterprises, leveraging Azure Active Directory (Azure AD) for Single Sign-On (SSO) authentication. The application allows users to manage tasks effectively, integrating seamlessly with organizational security protocols and policies.

Features

1. Single Sign-On (SSO)

• Azure AD Integration: Enables users to access the application using their work or school accounts without the need for multiple passwords.
• SAML-based Identity Provider: Configured to allow secure authentication, ensuring that only authorized users can sign in based on their Azure AD group memberships.

2. Task Management

• Create, Update, and Delete Tasks: Users can manage their tasks effectively with full CRUD (Create, Read, Update, Delete) capabilities.
• Task Categorization: Tasks can be categorized for better organization and prioritization.

3. Security Features

• Conditional Access: Implemented to make automated access control decisions based on conditions such as user location and application sensitivity.
• Legacy Authentication Blocking: Security measures are in place to block outdated authentication methods to protect against password spray attacks.

4. Compliance and Control

• Access Control Management: Administrators can manage access to corporate resources, ensuring that access is given or revoked based on organizational policies.
• Device Compliance Check: Ensures that devices accessing the application meet security and compliance standards.

5. Advanced Security Scanning

• Source Code Analysis: Vulnerability scanning and credential checks during the build process ensure the integrity of the codebase.
• Dynamic and Static Application Security Testing (DAST/SAST): Integrated testing methodologies to detect vulnerabilities both in code and during application runtime.

Architecture

Components

• Frontend: C# based web interface that allows users to interact with the task management features.
• Backend: A robust API layer that handles data processing, user authentication, and application logic.
• Database: A secure database, which stores user data and task information, ensuring compliance with organizational data protection policies.

Code Organization

• Controllers: Handle user inputs and interactions with the API.
• Models: Define the data structures for tasks and user information.
• Views: UI components that render the application frontend.
• Security: Classes and methods responsible for implementing authentication and authorization logic.

Getting Started

Prerequisites

• Azure Active Directory access for user authentication.
• .NET framework and associated packages installed.

Running the Application

1. Clone the repository:

   git clone https://github.com/your-repo/todo-app.git
   cd todo-app

2. Set up your Azure AD configuration in the application settings.
3. Run the application locally:

   dotnet run

Accessing the Application

• Open your web browser and navigate to http://localhost:5000.
• Log in using your Azure AD credentials.

Conclusion

The ToDo Application is designed to streamline task management while ensuring a high level of security and compliance within an organizational environment. Its integration with Azure AD for SSO and advanced security features make it a reliable solution for enterprise users.