Tag: Security
-
Part 3 of 4: Identity Is Not Authorization: API Permissions, Access Tokens and Azure RBAC Explained
A valid identity should never be confused with unlimited authorization. API permissions, access tokens and Azure RBAC each add a distinct layer of control.
-
Part 1 of 4: Why I Wouldn’t Build Microsoft Authentication Into My Web Application
Connecting a web app to Microsoft Azure starts with the wrong question. The right one separates identity, authorization, and product responsibility — and it changes the architecture.