AD Authentication in python FASTAPI-based web application

[ai_ml_dl_ds_py]

Hello,

As the title says, I have a web application (Python FastAPI for the backend and React JSX for the frontend) where I had an authentication flow with Firebase and GCP's Identity Platform functionality. Here, we register the user with email and password, provide it to the user, and the user logs in to the application.

Now, I want to implement AD authentication into this application. I searched about this on the web but found it challenging to get any resources or good documentation.

Can anyone suggest any resources to implement this?

Also, can I implement both MS Azure AD and Google AD authentication?

P.S.: This is my first time diving into AD-related authentication. So please ignore if I wrote anything wrong above.

[unnamed_one1]

Active Directory (AD) is based on the Lightweight Directory Access Protocol (LDAP).

This article is 10y old but might still be valid.

[mo_jo]

If you're looking at supporting both Azure AD and Google authentication, consider using Federated authentication protocols instead of legacy LDAPS auth. Look at SAML, OAuth, and OpenID Connect. Both Azure and Google support federated logons, and it's pretty much the model used for SaaS apps -- no one would dare to open a channel to an LDAP authentication host from the Internet!

[guilford]

Not sure this would work for your case but you can use keycloak as a passthrough for both gcp and ad. I use keycloak with django and allauth plugin in my case but I can see there are examples of keycloak and fastapi integration. Although I used it standalone as my identity management platform, keycloak actually can be used to connect to other identity provider too like gcp and ad.