Published on27 June 2023-5 min readWorking with Service Principals in Azure, Bicep and Azure DevOpsazuredevopsazure-devopsidentityTrying to assign a Service Principal to an RBAC role in Azure and receiveing the error 'Principals of type Application cannot validly be used in role assignments.'? Read on to find out how to fix it!
Published on8 May 2018-5 min readDeveloper toolkit for working with Azure AD B2C JWT-protected APIsazureaad-b2cjwtdebuggingidentityIn this post I'm going to walk through how you can debug JWT-protected APIs where those JWTs are being issued by AAD B2C.
Published on3 May 2018-10 min readMulti-environment deployments for Compiled C# Azure Functions with VSTS Release Managementazurefunctionsalmidentityvstsazure-devopscontinous-deploymentIhis post covers an approach you can use to deploy compiled C# Functions using the tooling available in Visual Studio 2017...
Published on24 March 2018-3 min readProvide non-admin users with read-only access to Service Endpoints in VSTSazureaccess-controlalmidentityvstsazure-devopssecuritypermissionsleast-privilegeI am currently transitioning some work to another team in our business. Part of this transition has been to pre-configure various Service Endpoints...
Published on16 February 2018-3 min readAzure AD B2C Custom Attributes: How to easily find their unique key valueazureaad-b2cidentitygraph-apitfscustom-attributesWhen working with Azure Active Directory B2C you can create what are known as Custom Attributes...
Published on22 February 2017-6 min readInviting Microsoft Account users to your Azure AD-secured VSTS tenantazureazure-advstsidentitysecurityb2b-invitesThis blog post is a reference for me (and I guess you too) to understand the invite process and document the experience the invited user has.
Published on10 March 2015-1 min readGoogle OpenID and Azure ACS - Time to update!cloudacsazuresecurityidentitygoogleoauthopenidTraditionally for Google-based identities, ACS utilised OpenID which Google is retiring in favour of an OAuth 2.0 implementation ("OpenID Connect").