-In the 2013 version –
user authentication remains the same with standard sites.
-When calling a web
app – the authentication happens internally.
-Internal
authentication happens when calling the web app.
-External
authentication – is utilized from the remote web site/application.
-To establish an app
identity claims based authentication must occur.
-Incoming calls must
use CSOM/REST end – points.
-Essentially the
authentication is the same except that calls to the web application are
authenticated with both user identity and app identity.
View Video: