Azure Active Directory Authentication Rest endpoint

Question

Hi,

We are trying to implement Oauth token on our custom gateway but looking to authenticate user credentials in Azure Active Directory before token generation. At present don't want to delegate the token generation task to AD.

We did initial proof of concept using Okta as IDP for performing this task.
Okta exposes Authentication APIs that can tell us the user's authenticated status.

More details here -
https://developer.okta.com/docs/reference/api/authn/

Basically we have a okta organization url -
https://xxx.okta.com/api/v1/authn

and we pass a JSON body with username and password information.

I am not able to find anything similar in Azure Active Directory. Are there any authentication api that can be called directly to check user is valid or not.

Any input is appreciated.

thanks,
Aakash

Answer 1

Hello @Aakash Sharma , thank you for reaching out. For using OAuth2.0/OIDC protocol with Azure AD, there are two endpoints that are available:

1. /authorize endpoint: This endpoint is used when the user tries to get Authenticated and request a Code and IdToken from Azure AD in return for a successful Authentication.
2. /token endpoint: Then the second endpoint that is called is the /token endpoint and to this endpoint, the previously received code from AAD is submitted to get an access-token to make further requests to access Azure AD protected APIs, for eg: Microsoft Graph API.

You can find more details on the auth flows here:

• Auth-Code Grant Flow of OAuth: https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow
• Open ID Connect Flow: https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc

Hope this helps.

Do let us know if this helps and if there are any more queries around this, please do let us know so that we can help you further. Also, please do not forget to accept the response as an Answer; if the above response helped in answering your query.