Home

Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core, or OWIN for integrating with the Microsoft identity platform (formerly Azure AD v2.0 endpoint), AAD B2C, and Microsoft Entra External ID

This library is for specific usage with:

• Web applications, which sign in users and, optionally, call web APIs
• Protected web APIs, which optionally call protected downstream web APIs
• Daemon scenarios, where an apps calls a protected API on behalf of itself (not a user)

Conceptual documentation

• Getting started with Microsoft Identity Web
  • Details on signing-in users with a web app
  • Details on calling protected web APIs
  • Details on token cache serialization
  • Create a ASP .NET Core web API template with Microsoft Identity Web
  • Use JSON schema to make configuration easier
• Roadmap
• Samples

See Why use Microsoft.Identity.Web?

Microsoft.Identity.Web is available as a set of NuGet packages (Microsoft.Identity.Web) for .NET 6+ and OWIN. Web apps can also use the (Microsoft.Identity.Web.UI) NuGet package, and there are packages to help you call Microsoft Graph (Microsoft.Identity.Web.GraphServiceClient or a downstream API (Microsoft.Identity.Web.DownstreamApi. Microsoft.Identity.Web also brings solutions for client credentials (certificates, and federation identity credentials), and decrypt credentials.

Using an appsettings.json file is the easiest way to configure your authentication. Adding the Microsoft.Identity.Web JSON schema to your appsettings.json file further improves ease of configuration.

You can create new web apps and web APIs using the Microsoft identity platform (formerly Azure AD v2.0) or Azure AD B2C, and leveraging Microsoft.Identity.Web. For this:

• use the following dotnet new commands.

Audience: users to sign-in:

• AAD = Work or School accounts
• MSA = Personal Microsoft accounts
• B2C = Social accounts or local accounts (Azure AD B2C)