Enabling OAuth2 to protect your Azure APIm
Protecting your Azure API is the most important part of your API design architecture. In fact, Azure API comes with a built-in authentication called as Ázure APIM Subscription , it comes with a subscription key, which you can see at under Azure API >> Subscription node: You can then send the subscription value as along with the header, while calling your API: However there is yet another way of protecting your API: using oAuth2 tokens. This article shows how to implement the same. Step 1: In your Azure portal >> Azure active directory >> App registration >> Register an App. Let us call it: client-app Note down the Client Id, Tenant Id, Object Id. Create a Secret, give it some suitable time for validity. Note down its value. Step 2: Click on the Endpoint: Copy the value of a. OAuth 2.0 authorization endpoint (v2) b. OAuth 2.0 token endpoint (v2) c. OpenID Connect metadata document Step 3: Come back to Azure active directory >> App registration >>