External API calling my API protected with Azure Active Directory

Question

If I have an Azure Active Directory protected API, what is the flow when the external API wants to talk to my internal API?

Is this just an API as normal or is it a special circumstance and needs to be handled in a different way?

Answer 1

Is this just an API as normal or is it a special circumstance and needs to be treated differently?

, api (-) . api api.

, , Azure Active Directory (AAD) .

AA- OAuth 2.0. API AAD , () ( API), , . - API. , , , , . -, , ( ).

- OAuth 2.0. AAD , , , 1 API on_behalf_of , . , ( tier1 api), .

AAD, asp.net, OwinAuthenticationMiddleware, . , , API API.

, , , , - .

, .

Answer 2

oAuth loggin - (. ).

OAuth, , .

- , -

API, , , (alias people). - , API. PKI / . PKI: http://docs.oracle.com/javase/6/docs/technotes/guides/security/certpath/CertPathProgGuide.html