Federated access from Azure to other clouds without a secret

Federated access from Azure to other clouds without a secret

Transcript

1. Federated access from Azure to other clouds without a secret Darek Dwornikowski
6. Enter Open ID Connect (OIDC) • OAuth 2.0 is a security standard where you give one application permission to access your data in another application on your behalf, without giving them your password. • OIDC adds identity part on top of OAuth, session etc (identity providers) • You can do it for machine too. All you need is trust.
7. What we will do
8. Our flow
9. Links • https://developer.okta.com/blog/2019/10/21/illustrated-guide-to-oauth-and-oidc • https://youtu.be/t18YB3xDfXI\ • https://gist.github.com/tdi/791e660027340dbc09da5f791c7b5661 • https://cloud.google.com/iam/docs/configuring-workload-identity-federation#azure • https://learn.microsoft.com/en-au/azure/active-directory/develop/howto-create- service-principal-portal • https://learn.microsoft.com/en-au/azure/active-directory/develop/howto-create- service-principal-portal#register-an-application-with-azure-ad-and-create-a-service- principal • https://medium.com/google-cloud/configuring-workload-identity-federation-with-azure- 672a1e1f3eec • jwt.ms
10. Thanks J let’s stay connected @7d1 https://www.linkedin.com/in/darekd/