Azure AD (Office 365) already has a REST API (https://developer.microsoft.com/en-us/graph/) so this is really for on-prem Active Directories.
On-prem Active Directory also has AD Web Services (https://technet.microsoft.com/en-us/library/dd391908(v=ws.10...) that I guess you could use instead of this, but a simple rest api like this will be easier to integrate with.
Ha, I've built my stuff several years ago so things might have been different then. I'll have to look at it again (but y'know, no need to touch stuff that keeps working...)
Edit: or it might be that our mail is in 365 but the AD is still partially on premises...
Yes. 365 is cloud AD. My bad. Not familiar with it. Are there no endpoints?
Azure Active Directory has a pretty comprehensive REST & JSON API - the Azure Active Directory Graph API:
https://docs.microsoft.com/en-us/azure/active-directory/deve...
It's recommended to access AAD through the Microsoft Graph API (as opposed to the AAD Graph API) unless it is one of the few scenarios not yet supported on Microsoft Graph. There is a lot of investment in adding new functionality to Microsoft Graph (such as the ability to extend AAD entities with custom, persisted properties on the /beta/ endpoint) and tooling. You can try/prototype out a bunch of your AAD requests in the Graph Explorer without writing code/needing to authenticate for most calls:
For the record, web-based 365 ADs (and most modern on-prem) already support webservices, just soap (and somewhat painful) rather than rest. I use it to authenticate from an app outside our network, the implementation wasn't that hard (python) but i really only do auth, no manipulation. It would be cool if MS added REST as an option to make this sort of common case easier, but they are too busy selling you complex integrated services to do that in Azure ("use Visual Studio, next next next, your app is now deployed on Azure and completely integrated with all these management tools. Cool, uh? Now give me lots of money every month or turn it off.")