Merge pull request #26885 from jslott2sigma/skip-user-profile

Fixes #26503 Add skipUserProfile flag to Microsoft authenticator
This commit is contained in:
Fredrik Adelöw
2024-10-02 13:39:29 +02:00
committed by GitHub
6 changed files with 60 additions and 24 deletions
+1
View File
@@ -86,6 +86,7 @@ The Microsoft provider is a structure with three mandatory configuration keys:
When specified, this reduces login friction for users with accounts in multiple tenants by automatically filtering away accounts from other tenants.
For more details, see [Home Realm Discovery](https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/home-realm-discovery-policy)
- `additionalScopes` (optional): List of scopes for the App Registration, to be requested in addition to the required ones.
- `skipUserProfile` (optional): If true, skips loading the user profile even if the `User.Read` scope is present. This is a performance optimization during login and can be used with resolvers that only needs the email address in `spec.profile.email` obtained when the `email` OAuth2 scope is present.
### Resolvers