如何使用“身份管理系统”？
这是我的第一个问题，所以我希望我不会错过任何事情。从一开始就可以明确：我不希望答案深入细节。这只是对如何使用这种软件的一般了解。
因此，我不知道“身份管理系统”是否适合我的意思用户可以在其网站上进行身份验证（包括访问权限等）的方式。
我不确定的是如何使用/集成此类工具在项目中。我将尝试以一个例子为例：假设我有一个网站，可以说这个网站是一个博客。该博客由连接到网站的我自己的数据库中存储的不同帖子组成。这些帖子是由不同用户编写的，这些用户使用Azure AD等工具进行身份验证。用户的数据存储在EG Microsoft运行的服务器上。如果我想显示带有名称的帖子，电子邮件....用户写了这些帖子，我该怎么做？
是否可以直接从身份管理系统中查询用户的数据并显示？这对我来说并不理想，因为结果是网站使用的数据存储在两个不同的位置。
您是否可以将用户数据从身份管理系统复制到网站数据库并从那里查询它？这听起来也不是一个很好的解决方案，因为然后将数据重复。
那么什么是“正确的工作流程”？
我感谢我能得到的任何提示和更多信息:-)
This is my first question, so I hope I don't miss a thing. To be clear from the start: I don't expect an answer which dives deep into detail. This is just about getting a general understanding of how to work with this kind of software.
So I don't know if "Identity Management System" is a suitable term for what I mean but when I talk about Identity Management Systems I think of something like Azure AD, which as far as I know provides e.g. web developers the possibility to integrate a way users can authenticate (including access privilege etc.) on their website.
What I'm quite unsure about is how to work with/ integrate such tools in a project. I will try to make it clear with an example: Assuming I have a website let's say this website is a blog. The blog consist of different posts which are stored in my own database which is connected to the website. The posts are written by different users which authenticate with a tool like Azure AD. The user's data is stored somewhere on a server run by e.g. Microsoft. If I want to display the posts togethere with the name, email.... of the user who wrote them, how would I do this?
Is it possible to query the user's data directly from the Identity Management System and display it? This does not sound ideal to me as the consequence would be that data the website uses is stored in two different locations.
Would you kind of copy the user's data from the Identity Management System to the websites database and query it from there? This does not sound like a good solution either because then data would be duplicated.
So whats the "right workflow"?
I appreciate any hints and further information I can get:-)
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
afaik以获取用户诸如姓名，电子邮件等的信息。您可以在生成JWT令牌时添加这些索赔。
以生成访问令牌，您有多个身份验证流，例如< strong> 授权代码流< /a> ， ropc流 ， 隐式流量 。
要添加您需要使用令牌返回的索赔，您可以进行以下设置：
转到Azure Portal -＆gt; Azure Active Directory-＆GT;应用注册 - ＆GT;您的应用程序 - ＆gt;令牌配置 - ＆gt;添加可选索赔
当您通过 json Web令牌-JWT.IO 您可以找到所需的用户信息。
要知道如何生成访问令牌，您可以参考 所以线程 我以前解决了它。
AFAIK To get the user's information like name, email etc. you can add these claims while generating the JWT token.
To generate access token, you have multiple authentication flows such as Authorization code flow, ROPC flow, Implicit flow.
To add the claims that you need to return with the token, you can make settings like below:
Go to Azure Portal -> Azure Active Directory -> App Registrations -> Your app -> Token configuration -> Add optional claims
When you decode the token via JSON Web Tokens - jwt.io you can find the user information that you need.
To know how to generate access token, you can refer SO Thread which I solved it before.