I am trying to understand Ms Azure ADFS. I started by registering a client. But, I have doubts in configuring an application to expose web API. What are these APIs exactly for and what is scope exactly?

Question

I am trying to understand Ms Azure ADFS. I started by registering a client. But, I have doubts in configuring an application to expose web API. What are these APIs exactly for and what is scope exactly?

Answer 1

Hi @Naga Dheeraj Madamanchi ,

If you are using ADFS for authentication, you need to you need OpenID Connect / OAuth. There is a sample you can follow here for Enabling your Web Apps to sign-in users and call APIs in Azure.

Entra ID/Azure AD provides the ability to secure APIs with OAuth 2.0. When you configure your application to expose an API you are defining the API that your application will protect.

The scope parameter defines the level of access that the client application has to the protected resource (i.e. "read" or "write" scope).

Additional resources;

AD FS OpenID scenarios

Quickstart: Configure an application to expose a web API

Let me know if this helps. If you have specific questions about your scenario and could describe more about the documentation you are following and the end goal you are trying to achieve, I can better help address those specific questions.