leifericf
Authentication and authorisation via Azure Active Directory (Azure AD)
Continuing the discussion from Ueberauth, Ruby CAS and other SSO options for Elixir or Phoenix:
Has anyone successfully implemented client-side authentication and authorisation via Azure Active Directory (Azure AD)? I’ve been looking into the libraries shield, oidcc (Erlang library), oauth2, guardian and ueberauth today; trying to wrap my head around the essential differences between these libraries, and how to make use of them. Any advice and pointers would be greatly appreciated.
I’m finding it difficult to get a good understanding of how these libraries differ. It would be particularly useful if someone would be so kind as to highlight the important differences between the aforementioned libraries, to make it easier to understand their intended usages.
Edit: Below is a related thread, for future reference.
Trending in Questions
Other Trending Topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Enabling companies to succeed by building software people love.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #channels
- #elixirconf
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #blog-post
- #graphql
- #genstage
- #ai
- #elixirconf-us
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #hex
- #performance
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Develop your skills with books, videos, and courses.
Producing high quality Elixir screencasts since 2017.
Enabling companies to succeed by building software people love.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
First 10 of 19 Posts
OvermindDL1
shieldlooks like an opinionated simple oauth2 and auth library only.oidcclooks like an OpenID Connect client library (nothing else)guardianis a token library (you really don’t need it in 99% of cases, don’t look at it unless JWT means something to you and you know the costs behind it)ueberauthis an unopinionated authentication framework pluggable via a huge variety of strategies (and it’s easy to make your own), I’d use this one as the strategies means you can change and update auth far more easily.leifericf
Thanks for your input, @OvermindDL1!
Do you have any thoughts about using oauth2 directly, versus a higher level library like ueberauth?
OvermindDL1
More direct control can be good (although I always end up writing my own strategies for ueberauth anyway, super easy to do and you get that control back), but it also means that if you need to support other things then you have a lot more work you end up having to do. Either is fine depending on your expected current and future work though.
leifericf
Solid advice, thanks again.
I’ll probably go for ueberauth, looking at the existing strategies to get some ideas on how it’s done.
whossname
I only just saw this thread. I’m in the process of publishing an Azure Active Directory authentication library for ueberauth right now! Still has a bit of work to go, mostly around testing and documentation.
https://github.com/whossname/ueberauth_azure_ad
Functionally the main thing missing is validation for the nonce and some error handling.
leifericf
Awesome, thanks!
whossname
Damnit, I’m nearly finished but it looks like there is an existing library that does something very similar to what I’m doing:
https://github.com/swelham/ueberauth_microsoft
leifericf
Oh! Right… I also discovered that after a while. It was a bit difficult to find, because the name and repo tags didn’t include “Azure” or “Azure AD,” etc. There was a conversation about that in a different forum thread. Also, since this topic was created, Pow has also entered the scene.
whossname
Yeh, I started working on mine on and off about 3 months ago before that thread started. No wonder I didn’t find it.
leifericf
I think @danschultzer would appreciate any help he can get on Pow. He has already implemented a strategy for Azure AD as well (work in progress), but doesn’t have an account to test it out