In this session, we will delve into the critical role of secrets in enterprise applications and explore whether clients can effectively safeguard their secrets. We will define what identity means in the context of security and the appropriate methods of verification (authentication). The session will cover the appropriate use of secrets and strategies for keeping them secure. Attendees will also get a firsthand look at securing an Aspire app using the free, open-source, container-based Keycloak identity provider.

⌚ Chapters:

00:00 Welcome: Secrets, Security and Keycloak in .NET Aspire

00:23 Agenda

01:05 Secrets and Identity

03:42 Application example

04:58 Why Keycloak?

08:49 Demo: Authenticate with Keycloak

21:38 Authenticating a machine or application

23:00 Clients - Who can keep your secrets

23:58 Hierarchy of secrets

25:07 Unlock the Vault

25:50 Secret parameters

27:15 Closing remarks

30:41 Wrap

https://aka.ms/aspire-keyvault

https://keycloak.org/server/vault

Sample Code: https://github.com/dotnet/eShopSupport - Coming Soon!

Collection: https://aka.ms/dotnetAspireDevDay/Collection

Playlist: https://aka.ms/foynryAspireDevDayVideos

Book Discount: Pragmatic Microservices with C# and Azure

https://aka.ms/dotnetAspireDevDay/Discount

Survey: https://aka.ms/dotnetAspireDevDay/Survey

Learn .NET Aspire: https://aka.ms/aspire/learn

.NET Aspire Videos: https://aka.ms/aspire/videos

.NET Aspire GitHub: https://github.com/dotnet/aspire

Documentation: https://learn.microsoft.com/dotnet/aspire

Connect with .NET:

Blog: https://aka.ms/dotnet/blog

Twitter: https://aka.ms/dotnet/twitter

TikTok: https://aka.ms/dotnet/tiktok

Mastodon: https://aka.ms/dotnet/mastodon

LinkedIn: https://aka.ms/dotnet/linkedin

Facebook: https://aka.ms/dotnet/facebook

Docs: https://learn.microsoft.com/dotnet

Forums: https://aka.ms/dotnet/forums

🙋‍♀️Q&A: https://aka.ms/dotnet-qa

👨‍🎓Microsoft Learn: https://aka.ms/learndotnet

Featuring: Jeremy Likness

#dotnet