About authentication method to get user credentials

Question

Dear Microsoft Advertising API team,

I have read guide that OAuth 2.0 method is used for authentication. In order to proceed, we need to register an application through Azure portal then we need to create Microsoft Azure account and register Azure Active Directory Service.

My question is that are there any other ways can get user credentials without having Azure account?

In addition, are there any other authentication methods that can get user credentials?

Thanks & Best Regards,

Phu Le

Answer 1

Hello Phu Le

To obtain user credentials for authentication without having an Azure account, you can consider using other authentication methods besides OAuth 2.0. Here are a few alternatives:

Username and password authentication: With this method, users provide their username and password directly to authenticate and access the application. This approach is commonly used for local authentication within an application but may not be suitable for certain scenarios due to security concerns.

OpenID Connect: OpenID Connect is an identity layer built on top of OAuth 2.0. It allows for authentication and obtaining user information using an OpenID Connect provider (such as Azure Active Directory). This method provides a way to authenticate users without requiring an Azure account explicitly.

Azure Active Directory B2C: Azure Active Directory B2C is a service provided by Azure that enables customer identity and access management. It supports various authentication methods, including social identity providers (such as Google, Facebook, etc.), local accounts, and more. This allows users to authenticate using their existing credentials from popular social platforms or custom accounts.

It's important to consider the specific requirements and security considerations of your application when choosing an authentication method. OAuth 2.0 and OpenID Connect are widely used and provide robust security and authorization capabilities. However, if you need more flexibility or specialized features, Azure Active Directory B2C might be a suitable option.

Remember to evaluate the security implications and compliance requirements of each authentication method to ensure the protection of user credentials and sensitive data.

Please accept answer and upvote if the above information is helpful for the benefit of the community.