You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/app-service/tutorial-connect-overview.md
+16-9Lines changed: 16 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,7 +22,7 @@ Today, the decision for a connectivity approach is closely related to secrets ma
22
22
23
23
## Connect with an app identity
24
24
25
-
If your app already uses a single set of credentials to access a downstream Azure service, you can very quickly convert the connection to use an app identity instead. A [managed identity](overview-managed-identity.md) from Microsoft Entra ID lets App Service access resources without secrets, and you can manage its access through role-based access control (RBAC). A managed identity can connect to any Azure resource that supports Microsoft Entra authentication, and the authentication takes place with short-lived tokens.
25
+
If your app already uses a single set of credentials to access a downstream Azure service, you can quickly convert the connection to use an app identity instead. A [managed identity](overview-managed-identity.md) from Microsoft Entra ID lets App Service access resources without secrets, and you can manage its access through role-based access control (RBAC). A managed identity can connect to any Azure resource that supports Microsoft Entra authentication, and the authentication takes place with short-lived tokens.
26
26
27
27
The following image demonstrates the following an App Service connecting to other Azure services:
28
28
@@ -32,9 +32,15 @@ The following image demonstrates the following an App Service connecting to othe
32
32
33
33
:::image type="content" source="media/scenario-secure-app-overview/web-app.svg" alt-text="Diagram showing managed identity accessing a resource with or without the user's identity.":::
34
34
35
+
Examples of using application secrets to connect to a database:
36
+
37
+
-[Tutorial: Connect to Azure databases from App Service without secrets using a managed identity](tutorial-connect-msi-azure-database.md)
38
+
-[Tutorial: Connect to SQL Database from .NET App Service without secrets using a managed identity](tutorial-connect-msi-sql-database.md)
39
+
-[Tutorial: Connect to a PostgreSQL Database from Java Tomcat App Service without secrets using a managed identity](tutorial-java-tomcat-connect-managed-identity-postgresql-database.md)
40
+
35
41
## Connect on behalf of the signed-in user
36
42
37
-
Your app might need to connect to a downstream service on behalf of the signed-in user. App Service lets you easily authenticate users using the most common identity providers (see [Authentication and authorization in Azure App Service and Azure Functions](overview-authentication-authorization.md)). If you use the Microsoft provider (Microsoft Entra authentication), you can then flow this signed-in user to any downstream service. For example:
43
+
Your app might need to connect to a downstream service on behalf of the signed-in user. App Service lets you easily authenticate users using the most common identity providers (see [Authentication and authorization in Azure App Service and Azure Functions](overview-authentication-authorization.md)). If you use the Microsoft provider (Microsoft Entra authentication), you can then flow the signed-in user to any downstream service. For example:
38
44
39
45
- In SQL database, run a query that returns confidential data that the signed-in user is authorized to read.
40
46
- Retrieve personal data or take actions as the signed-in user in Microsoft Graph.
@@ -74,13 +80,14 @@ For apps that connect to services using secrets (such as usernames, passwords, a
74
80
75
81
Examples of using application secrets to connect to a database:
76
82
77
-
-[ASP.NET Core with SQL DB](tutorial-dotnetcore-sqldb-app.md)
78
-
-[ASP.NET with SQL DB](app-service-web-tutorial-dotnet-sqldatabase.md)
79
-
-[PHP with MySQL](tutorial-php-mysql-app.md)
80
-
-[Node.js with MongoDB](tutorial-nodejs-mongodb-app.md)
81
-
-[Python with Postgres](tutorial-python-postgresql-app.md)
82
-
-[Java with Spring Data](tutorial-java-spring-cosmosdb.md)
83
-
-[Quarkus with Postgres](tutorial-java-quarkus-postgresql-app.md)
83
+
-[Tutorial: Deploy an ASP.NET Core and Azure SQL Database app to Azure App Service](tutorial-dotnetcore-sqldb-app.md)
84
+
-[Tutorial: Deploy an ASP.NET app to Azure with Azure SQL Database](app-service-web-tutorial-dotnet-sqldatabase.md)
85
+
-[Tutorial: Deploy a PHP, MySQL, and Redis app to Azure App Service](tutorial-php-mysql-app.md)
86
+
-[Deploy a Node.js + MongoDB web app to Azure](tutorial-nodejs-mongodb-app.md)
87
+
-[Deploy a Python (Django or Flask) web app with PostgreSQL in Azure](tutorial-python-postgresql-app.md)
88
+
-[Tutorial: Build a Tomcat web app with Azure App Service on Linux and MySQL](tutorial-java-tomcat-mysql-app.md)
89
+
-[Tutorial: Build a Java Spring Boot web app with Azure App Service on Linux and Azure Cosmos DB](tutorial-java-spring-cosmosdb.md)
90
+
-[Tutorial: Build a Quarkus web app with Azure App Service on Linux and PostgreSQL](tutorial-java-quarkus-postgresql-app.md)
0 commit comments