How does application validate the authenticated token from Azure Active Directory?

DEEPAK KUMPALA 191 Reputation points
2020-12-14T04:31:38.627+00:00

I have an application which is sitting behind WAF (Web Application Firewall).

Application is using Microsoft Active Directory for authentication.

Here are the steps

  1. User try to access the application using the browser.
  2. WAF layers see that REQUEST is not authenticated, hence forward it to Azure Active Directory
  3. AAD shows the login page and the user enters username/password/MFA
  4. Now token from AAD send back to the browser and it will be sent to the backend application

Now question is, How backend application verify this token? Does it need an outbound connection to AAD or will it talk to AAD through WAF and browser?
Do I need to have NSG rules (outbound ) to talk with AAD?

47775-2jigb.png

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,059 questions
0 comments
Accepted answer
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,461 Reputation points
    2020-12-14T23:55:19.273+00:00

    Hello, your backend application or API will need to be able to reach AAD in order to validate the access token. If you use a NSG you can add an outbound rule with Destination Service Tag and Destination Service Tag Azure Active Directory.

    Please let me know if you need more help. If the answer was helpful to you, please accept it and, optionally, provide feedback so that other members in the community can benefit from it.

    1 person found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. DEEPAK KUMPALA 191 Reputation points
    2020-12-16T09:12:33.62+00:00

    Thanks alfredorevilla-msft for understanding my question.

    Could you share some links on how do setup service tags?

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.