How does Azure App Service handle authentication and authorization for applications deployed on its platform?

Question

How does Azure App Service handle authentication and authorization for applications deployed on its platform?

Answer 1

Hello @Bejiga, Mesfin N

Azure App Service provides built-in authentication and authorization capabilities, which are sometimes referred to as "Easy Auth".

This feature allows you to sign in users and access data by writing minimal or no code in your web app, RESTful API, and mobile back end, and also Azure Functions. The authentication and authorization module handles web requests before handing them off to your application code, and it denies unauthorized requests before they reach your code.

App Service authentication and authorization support multiple authentication providers, including Azure Active Directory, Microsoft accounts, Facebook, Google, and Twitter.

You may implement your own authentication and authorization solution or allow App Service to handle it for you instead.

---

If this clarifies your question, please tag this as answered, as it may help further community readers, who may have similar questions.

Answer 2

@Bejiga, Mesfin N , Thanks for posting this question and following-up with an answer.

Since the Microsoft Q&A community has a policy that the question author cannot accept their own answer. They can only accept answers by others, I'll repost with additional info solution in case you'd like to Accept the answer.

Adding to your answer, summarizing from the doc:

Authentication and authorization in Azure App Service and Azure Functions and Configure your App Service or Azure Functions app to use Microsoft Entra sign-in

Azure App Service provides several options for handling authentication and authorization for applications deployed on its platform. Here are some of the most common options:

1. Microsoft Entra ID (Azure AD): Allows users to sign in to your app using their Microsoft Entra credentials. Have your app signs in users with the Microsoft identity platform (Microsoft Entra ID) as the authentication provider.
2. Social identity providers: Azure App Service supports several social identity providers, such as Facebook, Google, and Twitter. You can configure your app to use one or more of these providers as an authentication provider, allowing users to sign in to your app using their social media credentials.
3. Custom authentication: Azure App Service allows you to implement custom authentication logic for your app using a variety of authentication providers, such as OAuth, OpenID Connect, and SAML. This allows you to implement custom authentication workflows that meet the specific needs of your app.
4. Role-based access control (RBAC): Azure App Service provides built-in support for RBAC, allowing you to control access to your app based on user roles. You can define custom roles and assign them to users or groups, and then use RBAC to restrict access to specific parts of your app based on those roles.

With Azure App Service range of options for handling authentication and authorization for applications you select the option that best meets the requirement of your app.

Answer 3

The Easy Auth feature simplifies integration, and developers can implement custom authentication providers for specific needs. And Azure App Service ensures secure user access control for applications deployed on its platform.