Microsoft Identity Web documentation

Get started

Overview

• What is Microsoft.Identity.Web?
• NuGet packages

Quickstart

• Sign in users in a web app
• Protect a web API
• Call APIs from a daemon app

Authentication and credentials

Concept

• Credentials overview
• Certificateless authentication
• Certificates
• Client secrets
• Token decryption

How-To Guide

• Configure token caching
• Troubleshoot token caches
• Set up authorization

Microsoft Entra ID Auth SDK (sidecar)

Overview

• What is the Entra ID Auth SDK (sidecar)?
• Comparison with Microsoft.Identity.Web

Get started

• Installation and deployment
• Configuration reference
• Security best practices

Tutorial

• Validate authorization headers
• Call downstream APIs
• Use managed identity
• Integrate from TypeScript
• Integrate from Python

Framework support

How-To Guide

• .NET Aspire
• ASP.NET Framework and .NET Standard
• MSAL.NET with Microsoft.Identity.Web
• OWIN integration

Reference

• Migrate to IDownstreamApi
• Graph service client

Call downstream APIs

Concept

• Choose an API calling approach
• Token binding (mTLS)
• Agent identities

How-To Guide

• Call APIs from web apps
• Call APIs from web APIs
• Call Microsoft Graph
• Call Azure SDKs
• Call custom APIs