Android Question company employee authentication?

[MarkusR]

what is the best practice to authenticate only user in a app that belongs the company?

i considered that the user should authentication via his company account mail & password as ms office 365.
or maybe via active directory and web api?

any suggestions?

 

[techknight]

You would almost need a library/plugin for that. Otherwise you would need your own back-end database that your app connects to and uses to verify the user, and its authenticity and access rights.

I know with Google to use the google account in your app, you have to add and authorize your app to google and get the unique keys to allow your app to access google.

For a google example, take a look here: https://www.b4x.com/android/forum/threads/firebaseauth-authenticate-your-users.67875/

Its probably something similar with microsoft.

 

[MarkusR]

thanks techknight. the company users did not have a google account. a own user database is possible but i like to have something that is managed by our admins.
i found a documentation from ms here, it looks promising, i will try.
https://docs.microsoft.com/en-gb/as...ion/social/microsoft-logins?tabs=aspnetcore2x
.. omg ms provide so much possibilities

i think i will focus on this android lib
Microsoft Authentication Library (MSAL)
Package com.microsoft.identity.client
i believe the source is here
https://github.com/AzureAD/microsoft-authentication-library-for-android

 

[DonManfred]

I my apps i use the device-id.
On appstart our server (php-script) is called with the deviceid.
Based on an entry in our database for this deviceid he get results to the call. Not if the device is unknown. i then return a result which let the app block any further use.

 

[MarkusR]

device-id

the idea is good but the staff here did not have at all a companies smart phone (unfortunately). they have only ip phones in office.
but most of them have a private smart phone, there i care protection of privacy, and i am unsure if they will install this tool, its optional.
me considered to provide here a "public" tablet pc for data collection in case of need central in corridor, so everybody have access to this app and its there 24/7.