What is Backstage ?

 Backstage is constructed out of three parts

1. Core

2. App

3. Plugins

What is Storybook ?

 Storybook is the most popular tool for UI component development and documentation.

Each story allows you to demonstrate a specific component variation to verify appearance and behaviour.

Previously, you'd have to spin up the app, navigate to a page, and contort the UI into the correct state. This is a massive waste of time and bogs down front-end development. With Storybook, you can skip all those steps and jump straight to working on a UI component in a specific state.

Storybook makes it easy to work on one component in one state (aka a story) at a time.

Azure AD

 Azure AD is Microsoft’s cloud-based identity and access management service. It's

- Lets you manage internal and external users

- Allows you to manage devices

- Allows you to manage first party and third party applications

When you log into Azure Portal (using username and password) that particular account is authenticated by Azure AD. That particular account may have zero or more Subscriptions. Azure Portal is just a website that is protected by Azure AD. Azure AD is free and you don't need a subscription to create an Azure AD. 

Modern Authentication

- WS-* (WS-Federation is under WS-*) and SAML

- OAuth (is a standard for delegation)

I am allowing "A" to do "B" on my behalf. At no point does A get my password. B is a set of permission.

Eg:- I (Anuruddha on Twitter), am allowing website www.somesite.com(A) to read my profile. And in exchange A gets to know who I am, and offers me some functionality. There is no standards

- OpenID Connect

Add strict standards so OAuth can be used as an authentication protocol. The identity layer builds on top of OAuth 2.0. 

OpenID Connect Flows

- Implicit (If you are using JS SPA)

- PKCE (For Mobile apps, for redirects)

- AuthCode (Build of Token. ID Token, Access Token, Refresh Token - to renew the Access Token silently)

- Client Credentials (Pass Client ID and you get Access Token back, no refresh token.)