How to secure OAuth2 (v2) endpoints

_Omar_ 0 Reputation points
2024-07-04T00:11:36.08+00:00

We working out on deploy OAuth2 with Entra ID endpoints, by default this endpoints are accessible by public internet. For security reasons, we need that traffic to these private endpoints traverses the Microsoft backbone network without ever touching the public Internet. Is there away to this?

We have already a VPN and Expressrote from our onpremise infra to our Azure tenant.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,360 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sandeep Kumar 20 Reputation points
    2024-07-04T04:40:50.82+00:00

    The Open Authorization (OAuth) 2.0 is the industry protocol for authorization. It allows a user to grant limited access to its protected resources. Designed to work specifically with Hypertext Transfer Protocol (HTTP), OAuth separates the role of the client from the resource owner. The client requests access to the resources controlled by the resource owner and hosted by the resource server. The resource server issues access tokens with the approval of the resource owner. The client uses the access tokens to access the protected resources hosted by the resource server.

    OAuth 2.0 is directly related to OpenID Connect (OIDC). Since OIDC is an authentication and authorization layer built on top of OAuth 2.0, it isn't backward compatible with OAuth 1.0. Microsoft Entra ID supports all OAuth 2.0 flows.

    https://video2.skills-academy.com/en-us/entra/architecture/auth-oauth2

    0 comments