...
Who's involved:
- Microsoft Entra ID
What Azure AD Entra ID checks:
- ✅ Does this client ID exist?
- ✅ Does the client secret match?
- ✅ Does this app have permission to call IntegrationServiceAPI?
...
- IntegrationServiceAPI receives request with token
- Authentication middleware examines the token
- Validates token is authentic and valid (using cached Azure AD Entra ID public keys - no Azure AD Entra ID call needed)
Who's involved:
...
Where configured:
- Environment variables (recommendedin integrationservice container app)
appsettings.json(development only, with secrets.json)
...