PM.Readme chain for #232

[skgithubtest[bot]]

Create a ToDo Application using the STUDENT App Catalog group in C#

[skgithubtest[bot]]

ToDo Application

Overview

The ToDo Application is a robust task management tool designed for users in an organizational context. Leveraging Azure Active Directory (AD) for Single Sign-On (SSO) and Conditional Access, the application ensures secure access to tasks while allowing users to manage their responsibilities efficiently.

Main Features

1. Single Sign-On (SSO)

• Integrated Authentication: Users can access the ToDo Application using their work or school accounts without the need for multiple usernames and passwords.
• SAML-based Identity Provider: The application is configured to utilize Azure AD as a SAML-based identity provider, enhancing security and streamlining user experience.

2. Conditional Access Policies

• Dynamic Access Control: The application features Azure AD Conditional Access policies that enable automated access control decisions based on user group memberships, location, and application sensitivity.
• Security Compliance: Ensures access only for compliant devices that meet the organization’s security standards.

3. Task Management

• Create, Update, and Delete Tasks: Users can easily manage their tasks with intuitive functionality for creating, updating, and deleting tasks.
• Task Prioritization: Users can prioritize tasks to focus on what matters most.

4. Cross-Device Accessibility

• Multi-Device Support: Users can access their tasks from various devices, providing flexibility and convenience to manage tasks from anywhere.

5. Security Features

• Credential Management: The application integrates scanning tools (e.g., GitHub Advanced Security, OWASP) to catch credentials in source code and ensure secure handling of sensitive information.
• Vulnerability Scanning: Utilizes DAST and SAST methodologies to detect vulnerabilities within the application during development and after deployment.

Architecture and Code Organization

1. Application Structure

• Frontend: Built with modern web technologies, providing a responsive user interface for task management.
• Backend: C# based API that handles authentication, user management, and task operations.
• Database: Utilizes a relational database to store user information and task data securely.

2. Security Practices

• Secure DevOps Integration: The project follows best practices for DevOps security, including scanning dependencies and incorporating security guidelines from OWASP.
• Conditional Access Enforcement: The application enforces Azure AD Conditional Access policies to restrict access based on defined security criteria.

3. Development Pipeline

• Continuous Integration (CI): Incorporates tools for scanning code during builds, ensuring vulnerabilities are caught early in the development cycle.
• Automated Testing: A set of automated tests to validate the functionality and security of the application.

Getting Started

Prerequisites

• An Azure AD tenant for managing users and groups.
• Access to the ToDo Application hosted on Azure.

Running the Application

1. Clone the Repository: Clone the application repository from your version control system.
2. Set Up Environment Variables: Configure the necessary environment variables for connecting to Azure AD and the database.
3. Build and Run: Use your preferred IDE to build and run the application, ensuring all dependencies are installed.

dotnet build
dotnet run

Note

Ensure that your Azure AD is configured to allow access to the application based on your organization’s policies.

Conclusion

The ToDo Application is designed to facilitate effective task management while ensuring high levels of security and compliance through integration with Azure Active Directory. By following best practices in security and application design, the application provides a reliable solution for users to manage their tasks across various devices.