Tag: Identity
-
Part 3 of 4: Identity Is Not Authorization: API Permissions, Access Tokens and Azure RBAC Explained
A valid identity should never be confused with unlimited authorization. API permissions, access tokens and Azure RBAC each add a distinct layer of control.
-
Part 2 of 4: Azure Subscription, Entra ID, Tenant and App Registration: What Does Each One Actually Do?
Azure Subscription, Entra ID, Tenant, App Registration and Client ID sound like overlapping terms. They are not. Each solves a distinct problem in the identity architecture.
-
Part 1 of 4: Why I Wouldn’t Build Microsoft Authentication Into My Web Application
Connecting a web app to Microsoft Azure starts with the wrong question. The right one separates identity, authorization, and product responsibility — and it changes the architecture.