Skip to content

Commit 708f79f

Browse files
dlepowdlepow
committed
back our auth content
1 parent 5c2eba3 commit 708f79f

24 files changed

+107
-218
lines changed

‎.openpublishing.redirection.api-management.json

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -149,16 +149,6 @@
149149
"source_path_from_root": "/articles/api-management/validation-policies.md",
150150
"redirect_url": "/azure/api-management/api-management-policies#validation-policies",
151151
"redirect_document_id": false
152-
},
153-
{
154-
"source_path_from_root": "/articles/api-management/authorizations-how-to.md",
155-
"redirect_url": "/azure/api-management/authorizations-how-to-github",
156-
"redirect_document_id": false
157-
},
158-
{
159-
"source_path_from_root": "/articles/api-management/authorizations-reference.md",
160-
"redirect_url": "/azure/api-management/authorizations-configure-common-providers",
161-
"redirect_document_id": false
162152
}
163153
]
164154
}

‎articles/api-management/authorizations-how-to-azure-ad.md

Lines changed: 0 additions & 166 deletions
This file was deleted.

‎articles/api-management/authorizations-overview.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,8 @@ description: Learn about authorizations in Azure API Management, a feature that
44
author: dlepow
55
ms.service: api-management
66
ms.topic: conceptual
7-
ms.date: 02/01/2023
7+
ms.date: 06/03/2022
88
ms.author: danlep
9-
ms.custom: references_regions
109
---
1110

1211
# Authorizations overview
@@ -49,7 +48,7 @@ For public preview the following limitations exist:
4948

5049
- Authorizations feature only supports Service Principal and Managed Identity as access policies.
5150
- Authorizations feature only supports /.default app-only scopes while acquire token for https://.../authorizationmanager audience.
52-
- Authorizations feature is not supported in the following regions: australiacentral, australiacentral2, jioindiacentral.
51+
- Authorizations feature is not supported in the following regions: swedencentral, australiacentral, australiacentral2, jioindiacentral.
5352
- Authorizations feature is not supported in National Clouds.
5453
- Authorizations feature is not supported on self-hosted gateways.
5554
- Supported identity providers can be found in [this](https://github.com/Azure/APIManagement-Authorizations/blob/main/docs/identityproviders.md) GitHub repository.

‎articles/api-management/authorizations-reference.md

Lines changed: 102 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,102 @@
1+
---
2+
title: Reference for OAuth 2.0 authorizations - Azure API Management | Microsoft Docs
3+
description: Reference for identity providers supported in authorizations in Azure API Management. API Management authorizations manage OAuth 2.0 authorization tokens to APIs.
4+
author: dlepow
5+
ms.service: api-management
6+
ms.topic: reference
7+
ms.date: 05/02/2022
8+
ms.author: danlep
9+
---
10+
11+
# Authorizations reference
12+
This article is a reference for the supported identity providers in API Management [authorizations](authorizations-overview.md) (preview) and their configuration options.
13+
14+
## Azure Active Directory
15+
16+
17+
**Supported grant types**: authorization code and client credentials
18+
19+
20+
### Authorization provider - Authorization code grant type
21+
22+
| Name | Required | Description | Default |
23+
|---|---|---|---|
24+
| Provider name | Yes | Name of Authorization provider. | |
25+
| Client id | Yes | The id used to identify this application with the service provider. | |
26+
| Client secret | Yes | The shared secret used to authenticate this application with the service provider. ||
27+
| Login URL | No | The Azure Active Directory login URL. | https://login.windows.net |
28+
| Tenant ID | No | The tenant ID of your Azure Active Directory application. | common |
29+
| Resource URL | Yes | The resource to get authorization for. | |
30+
| Scopes | No | Scopes used for the authorization. Multiple scopes could be defined separate with a space, for example, "User.Read User.ReadBasic.All" | |
31+
32+
33+
### Authorization - Authorization code grant type
34+
| Name | Required | Description | Default |
35+
|---|---|---|---|
36+
| Authorization name | Yes | Name of Authorization. | |
37+
38+
---
39+
40+
### Authorization provider - Client credentials code grant type
41+
| Name | Required | Description | Default |
42+
|---|---|---|---|
43+
| Provider name | Yes | Name of Authorization provider. | |
44+
| Login URL | No | The Azure Active Directory login URL. | https://login.windows.net |
45+
| Tenant ID | No | The tenant ID of your Azure Active Directory application. | common |
46+
| Resource URL | Yes | The resource to get authorization for. | |
47+
48+
49+
### Authorization - Client credentials code grant type
50+
| Name | Required | Description | Default |
51+
|---|---|---|---|
52+
| Authorization name | Yes | Name of Authorization. | |
53+
| Client id | Yes | The id used to identify this application with the service provider. | |
54+
| Client secret | Yes | The shared secret used to authenticate this application with the service provider. ||
55+
56+
---
57+
58+
## Google, LinkedIn, Spotify, Dropbox, GitHub
59+
60+
**Supported grant types**: authorization code
61+
62+
### Authorization provider - Authorization code grant type
63+
| Name | Required | Description | Default |
64+
|---|---|---|---|
65+
| Provider name | Yes | Name of Authorization provider. | |
66+
| Client id | Yes | The id used to identify this application with the service provider. | |
67+
| Client secret | Yes | The shared secret used to authenticate this application with the service provider. ||
68+
| Scopes | No | Scopes used for the authorization. Depending on the identity provider, multiple scopes are separated by space or comma. Default for most identity providers is space. | |
69+
70+
71+
### Authorization - Authorization code grant type
72+
| Name | Required | Description | Default |
73+
|---|---|---|---|
74+
| Authorization name | Yes | Name of Authorization. | |
75+
76+
---
77+
78+
## Generic OAuth 2
79+
80+
**Supported grant types**: authorization code
81+
82+
83+
### Authorization provider - Authorization code grant type
84+
| Name | Required | Description | Default |
85+
|---|---|---|---|
86+
| Provider name | Yes | Name of Authorization provider. | |
87+
| Client id | Yes | The id used to identify this application with the service provider. | |
88+
| Client secret | Yes | The shared secret used to authenticate this application with the service provider. ||
89+
| Authorization URL | No | The authorization endpoint URL. | |
90+
| Token URL | No | The token endpoint URL. | |
91+
| Refresh URL | No | The token refresh endpoint URL. | |
92+
| Scopes | No | Scopes used for the authorization. Depending on the identity provider, multiple scopes are separated by space or comma. Default for most identity providers is space. | |
93+
94+
95+
### Authorization - Authorization code grant type
96+
| Name | Required | Description | Default |
97+
|---|---|---|---|
98+
| Authorization name | Yes | Name of Authorization. | |
99+
100+
## Next steps
101+
102+
Learn more about [authorizations](authorizations-overview.md) and how to [create and use authorizations](authorizations-how-to.md)

‎articles/api-management/get-authorization-context-policy.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@ author: dlepow
66

77
ms.service: api-management
88
ms.topic: article
9-
ms.date: 02/22/2022
9+
ms.date: 12/08/2022
1010
ms.author: danlep
1111
---
1212

1313
# Get authorization context
1414

15-
Use the `get-authorization-context` policy to get the authorization context of a specified [authorization](authorizations-overview.md) configured in the API Management instance.
15+
Use the `get-authorization-context` policy to get the authorization context of a specified [authorization](authorizations-overview.md) (preview) configured in the API Management instance.
1616

1717
The policy fetches and stores authorization and refresh tokens from the configured authorization provider.
1818

@@ -66,7 +66,7 @@ class Authorization
6666

6767
- [**Policy sections:**](./api-management-howto-policies.md#sections) inbound
6868
- [**Policy scopes:**](./api-management-howto-policies.md#scopes) global, product, API, operation
69-
- [**Gateways:**](api-management-gateways-overview.md) dedicated, consumption
69+
- [**Gateways:**](api-management-gateways-overview.md) dedicated
7070

7171
## Examples
7272

‎articles/api-management/media/authorizations-configure-common-providers/saas-providers.png

-111 KB
Binary file not shown.

‎articles/api-management/media/authorizations-how-to-azure-ad/add-permission.png

-397 KB
Binary file not shown.

‎articles/api-management/media/authorizations-how-to-azure-ad/create-access-policy.png

-54.8 KB
Binary file not shown.

‎articles/api-management/media/authorizations-how-to-azure-ad/create-authorization.png

-52.7 KB
Binary file not shown.

‎articles/api-management/media/authorizations-how-to-azure-ad/create-registration.png

-328 KB
Binary file not shown.

0 commit comments

Comments
 (0)