Microsoft Azure is OAuth2-compliant, so the OAuth2 authentication
plugin that FileRun comes with can be used to authenticate users against
Azure.
You can easily activate and configure the plugin directly from FileRun's
control panel, under System configuration →
User login and registration.
For more information on configuring FileRun with OAuth2, please see this page.
1. Start the process or registering an application with Azure.
1. a) You will be asked for a Redirect URI. Get this from the FileRun
control panel. It is the first field you see under "OAuth2 plugin
options" when enabling the OAuth2 authentication plugin.
2. With the new Azure application registered, use the provided
Application (client) ID to fill the FileRun setting Client ID.
3. Under Client credentials, click to Add a certificate or secret.
Click to add a New client secret. With the new client secret created,
copy the Value field to the FileRun setting Client Secret.
3. Back on the Azure project main page, go to Endpoints.
3. a) Copy OAuth 2.0 authorization endpoint (v1) to FileRun's
Authorization URL. It looks like this:
https://login.microsoftonline.com/<tenant>/oauth2/authorize.
Replace <tenant> with your Directory (tenant) ID.
3. b) Copy OAuth 2.0 token endpoint (v1) to FileRun's Access Token URL. It looks like this:
https://login.microsoftonline.com/<tenant>/oauth2/token. Replace
<tenant> with your Directory (tenant) ID.
4. Set FileRun's List of scopes to openid,profile,email
4. Set FileRun's User info API URL to
https://login.microsoftonline.com/<tenant>/openid/userinfo. Replace
<tenant> with your Directory (tenant) ID.
5. Set FileRun's field mappings as follows:
$.email$.given_name$.family_name$.emailIf you do not hide the FileRun logout option, please configure the
Logout URL to
https://login.microsoftonline.com/<tenant>/oauth2/v2.0/logout?post_logout_redirect_uri=https://localhost/myapp/
Replace <tenant> with your Directory (tenant) ID. Replace
https://localhost/myapp/ with the URL of your FileRun installation.