Managed Identity Token Acquisition Flow

In Azure, authentication and authorization are handled by the Microsoft Identity Platform, which is the central service that verifies who a user is and decides what they can do. The platform uses two main protocols: OpenID Connect for authentication (sign-in) and OAuth 2.0 for authorization (permissions). When a user tries to access an application, the app sends the user to the identity platform, where the user signs in with credentials such as a password or a multifactor code. The platform returns an ID token that proves the user’s identity and an access token that the app can use to call other APIs on the user’s behalf.