Support Azure Active Directory / Office365

[tamalsaha]

appscode/gologin@edbb42e

[tamalsaha]

kubectl OIDC provider demo: https://www.youtube.com/watch?v=giV0WHtp49A

kubernetes/kubernetes#43987

[tamalsaha]

https://developer.microsoft.com/en-us/graph/graph-explorer
Azure AD Graph, https://graphexplorer.azurewebsites.net/

[tamalsaha]

Python:
https://azure-sdk-for-python.readthedocs.io/en/latest/graphrbac.html
https://github.com/Azure/azure-sdk-for-python/blob/master/doc/graphrbac.rst
https://msdn.microsoft.com/library/azure/ad/graph/howto/azure-ad-graph-api-operations-overview#TenantIdentifier

API:
https://msdn.microsoft.com/en-us/library/azure/ad/graph/api/users-operations#GetUsersMemberships

[tamalsaha]

ref: https://github.com/Nike-Inc/harbormaster

[tamalsaha]

API Docs:

• getMemberGroups : https://github.com/microsoftgraph/microsoft-graph-docs/blob/master/api-reference/v1.0/api/directoryobject_getmembergroups.md
• directoryObjects/getByIds: https://github.com/microsoftgraph/microsoft-graph-docs/blob/master/api-reference/v1.0/api/directoryobject_getbyids.md

GET Groups

• https://msdn.microsoft.com/en-us/Library/Azure/Ad/Graph/api/groups-operations#GetGroups
• https://msdn.microsoft.com/en-us/Library/Azure/Ad/Graph/howto/azure-ad-graph-api-operations-overview#TenantIdentifier

Azure AD Concepts:

• https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-dev-glossary#multi-tenant-application
• https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-integrating-applications
• https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-graph-api

Azure Graph API: App Permission String -> GUID mapping:

• https://marketplace.visualstudio.com/items?itemName=stephane-eyskens.aadv1appprovisioning

Azure JWT Token Group Claim (only has GUIDs)

• https://cloudblogs.microsoft.com/enterprisemobility/2014/12/18/azure-active-directory-now-with-group-claims-and-application-roles/

Azure Active Directory application manifest
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-manifest

[tamalsaha]

• Application and service principal objects : https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-objects

• delegated and application permissions : https://docs.microsoft.com/en-us/azure/active-directory/application-dev-delegated-and-app-perms