Diagram
A decision tree that helps choose between a Service Principal and a Managed Identity by branching on where the application runs, the need for credential management, and security requirements.
Design and implement authentication and authorization methods
Authentication is the process of verifying a user or system's identity, while authorization determines what they are allowed to do. In Azure DevOps, the primary method for authentication is Azure Active Directory (Azure AD). This service manages user identities and can connect to on-premises directories. It provides a single sign-on experience, meaning a user logs in once to access multiple services. For automated processes like scripts or pipelines, service principals or managed identities are used instead of passwords. A service principal is a security identity created for an application, while a managed identity is an Azure AD identity automatically managed by Azure and assigned to an Azure resource, like a virtual machine, to securely access other Azure services.
Domain 4 of 5
45 practice questions
Practice this DomainLast updated