AZ-400: Design and implement an authentication strategy

Guidance for authentication

• Different authentication types work best with different application types
• Personal Access Token (PAT)
  • identifies you, your accessible organizations, and your scopes of access
  • should be treated and used like a password
  • also used to configure the cross-platform CLI
• OAuth
  • useful for authenticating apps for REST API access
• Avoid IIS Basic Authentication
  • prevents use of PATs
  • breaks Git, because it requires PATs