Securing a Spring Boot API with MS Entra ID (Azure AD)

Introduction Modern APIs need robust authentication to protect sensitive resources. MS Entra ID (formerly Azure Active Directory) provides enterprise-grade OAuth 2.0 authentication that integrates seamlessly with Spring Boot applications. In this article, you’ll learn how to: Register an application in MS Entra ID using Terraform Configure a Spring Boot API to validate OAuth 2.0 access tokens Implement API endpoint protection Test your secured API with real tokens This is the first article in a series on Spring Boot API security with MS Entra. Future articles will cover implementing role-based access control (RBAC) using app_roles and fine-grained authorization patterns. ...

February 2, 2026

Setting Up Azure CLI and Terraform AzureAD Provider for Entra ID Management

Introduction Managing Microsoft Entra ID (formerly Azure Active Directory) resources requires proper authentication and tooling. Whether you’re automating app registrations, configuring conditional access policies, or managing users and groups, Azure CLI and Terraform provide powerful infrastructure-as-code capabilities. In this article, you’ll learn: How to install and configure Azure CLI How to authenticate with az login --allow-no-subscriptions How to obtain Microsoft Graph access tokens How to configure Terraform’s AzureAD provider What happens behind the scenes during authentication Why Azure CLI and Terraform? Azure CLI provides direct command-line access to Azure and Entra ID resources. It’s essential for: ...

February 18, 2026