Azure Static Web Apps [Azure SWA] is aimed at the current rage in the frontend market, SSG. It is a service that automatically builds and deploys full stack web apps to Azure from a code repository. So its super easy to deploy MVPs, PoCs, and hobby projects. But for a production app, you need to get Authentication & Authorization [IAM] perfect. This talk will deep dive into the elaborate synchronization required amongst the principals involved: code, infrastructure, and Authentication Provider; while at the same time maintaining developer productivity. Since Azure SWA is a relatively new offering and programmatic roles is a preview feature of SWA, we will also dwell on a few gotchas you need to be aware.