Test Web App
Sign in.
See the flow.
A minimal demo of Microsoft Entra External ID powering authentication for a web app.
Hosted sign-in
Credentials never touch this app. Microsoft handles the sign-in page, MFA, and password reset.
OpenID Connect
Standards-based authorization code flow with a confidential client running on Node.
Session-backed
After sign-in, claims are stored in a secure HTTP-only session cookie over TLS.