The Microsoft Login Connector is a great way to add token based authentication to your OutSystems applications. Users and applications use an Azure Entra ID identity to identify themselves. The OAuth2 protocol offers a special flow, the On-Behalf-Of flow, that allows us to pass the identity of a user in a token. We use this flow in a hybrid, layered services architecture, running both .NET and OutSystems services. Using this flow, the identity of the user can also be used in downstream API's. In this session you will learn how we use this on-behalf-of flow. I will demonstrate how to setup Azure Entra ID and how we extended the Microsoft Login Connector library. The end result? For application developers it is now very easy to to use the identity of the logged in user in their API's.
