Discussing authentication

In the previous sections, we have seen how the external authentication is carried out. It all starts with registering the user details that are retrieved from the external authentication providers. On successful registration of the user's details with our application, we don't need to store the user details again in our application again.

This time the external authentication providers will not ask the permission of users in order to enable access to their public profile information as the user has already given the permission to our application. So, the external authentication providers will just authenticate the user and our application will bypass the registration process for the existing users.

Get ASP.NET Web API Security Essentials now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.