{"id":3598,"date":"2019-11-04T11:00:28","date_gmt":"2019-11-04T18:00:28","guid":{"rendered":"https:\/\/developer.microsoft.com\/en-us\/office\/blogs\/?p=3598"},"modified":"2021-10-18T11:02:48","modified_gmt":"2021-10-18T18:02:48","slug":"microsoft-identity-platform-at-ignite-2019","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/microsoft365dev\/microsoft-identity-platform-at-ignite-2019\/","title":{"rendered":"Microsoft identity platform at Ignite 2019"},"content":{"rendered":"

Hello Developers!<\/p>\n

We\u2019re thrilled to be at Microsoft Ignite<\/a> in Orlando, FL this week engaging with our community of IT professionals and developers. We\u2019re excited to be showing the latest improvements that we\u2019re making to the Microsoft identity platform so it’s easier to develop apps that integrate with any Microsoft identity. Read on to learn more on how we\u2019re continuing to improve the Microsoft identity platform and what we\u2019re announcing this week at Ignite.<\/p>\n

Microsoft Authentication Libraries available for more platforms<\/strong><\/p>\n

Just last month we announced that Microsoft Authentication Libraries (MSAL) for Android, iOS and macOS<\/a> are generally available. And today, we\u2019re announcing that MSAL for Python<\/a> and Java<\/a> are now in public preview. The Microsoft Authentication Libraries are the best way to integrate authentication into your applications and services for any Microsoft identity. By using our libraries your applications can begin to support single sign-on, advanced security features like Azure AD Identity Protection<\/a>, passwordless authentication, and comply with Conditional Access policies implemented by IT. For developers that have existing applications that use Azure Active Directory Authentication Library (ADAL) we\u2019ve made available detailed migration guidance<\/a> so your applications can be upgraded to MSAL.<\/p>\n

Application API is now generally available<\/strong><\/p>\n

To make it even easier and more scalable to manage your applications, the Application API in Microsoft Graph is now generally available. All the things you can do in the app registrations experience can also be done through Microsoft Graph. With the Application API you can register, update or even rotate application certificates and secrets at scale through Microsoft Graph. Additionally, the Application API allows you to build workflows and automation to streamline processes. Be sure to explore our documentation<\/a> to learn about all the ways you can programmatically manage your applications.<\/p>\n

Public preview of app registrations in Azure AD B2C tenants<\/strong><\/p>\n

We also brought the new app registrations experience in the Azure portal to Azure AD B2C tenants! The new experience, currently rolling out to public preview, shows you all your B2C app registrations and Azure AD app registrations in one place and gives you a consistent way to manage them. You can try it out by navigating to App registrations (Preview)<\/a> in a B2C tenant. To learn more about how to get started, check out our documentation<\/a>.<\/p>\n

Microsoft Graph now includes all Azure AD Graph capabilities and more<\/strong><\/p>\n

It\u2019s been quite a journey to bring all functionality that Azure AD Graph offers into Microsoft Graph. And today, we\u2019re thrilled to announce that all functionality in Azure AD Graph is now available in Microsoft Graph! Over the past few months we\u2019ve made managing OrgContacts, Cert-based auth configuration, Directory RBAC and more Azure AD APIs available in Microsoft Graph.<\/p>\n

Moving forward all Azure AD features and new innovations will only be available on Microsoft Graph. We strongly recommend developers building new apps to use Microsoft Graph only and developers who have existing apps to migrate to Microsoft Graph<\/a>. You can monitor the Azure AD capabilities that we add into Microsoft Graph in our changelog<\/a>. We\u2019re in the process of rolling out all Azure AD Graph capabilities into Microsoft Graph and expect all customers to be able to take advantage of these capabilities by the end of this month.<\/p>\n

Improving our consent model<\/strong><\/p>\n

As part of making our consent experience easier and more flexible, we\u2019ll be giving developers the ability to grant access to specific resources. This finer grained control helps administrators ensure that users within their tenants operate with least privilege. The ability to enable resource specific consent is now in preview for Microsoft Teams applications and we plan to expand this capability to other resources and scenarios.<\/p>\n

We\u2019ve also improved our admin consent experience so end users can quickly request consent to applications that you\u2019re building.\u00a0 The new admin consent experience allows users to request consent and to direct these requests to administrators so they can track app requests,\u00a0act on these requests, and approve consent at an app level. With the new workflow, we\u2019re helping end users seamlessly adopt applications while ensuring the applications they adopt adhere to organizational requirements.<\/p>\n

Come talk to us at Ignite<\/strong><\/p>\n

If you\u2019re attending Microsoft Ignite this year be sure to stop by our Microsoft identity platform sessions to learn more about what\u2019s new and best practices when developing apps with the Microsoft identity platform.<\/p>\n