Secure Connection Using Managed Identity

Authentication verifies who a user is, while authorization decides what that user can do. Azure App Service handles authentication through built-in support for identity providers like Microsoft Entra ID, Facebook, Google, and X, using OAuth 2.0 to manage the login flow. When a user tries to access your app, unauthenticated requests get redirected to the chosen provider before reaching your code. You configure this through the Authentication blade in the Azure portal, where you specify supported account types, what happens for unauthenticated requests, and whether to store tokens for session management.