paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 23 Packages Projects Releases Wiki Activity

Merge pull request #20694 from afscrome/entra-domain-hint

Browse Source 
Add `domain_hint` support to Entra ID login
This commit is contained in:
Fredrik Adelöw
2023-10-26 17:07:24 +02:00
committed by GitHub
parent b922e07c58 692e2397c2
commit b42109f05a
6 changed files with 96 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/auth/microsoft/provider.md
+6 -1
View File
@@ -38,13 +38,18 @@ auth:
clientId: ${AUTH_MICROSOFT_CLIENT_ID}
clientSecret: ${AUTH_MICROSOFT_CLIENT_SECRET}
tenantId: ${AUTH_MICROSOFT_TENANT_ID}
domainHint: ${AZURE_TENANT_ID}
```
The Microsoft provider is a structure with three configuration keys:
The Microsoft provider is a structure with three mandatory configuration keys:
- `clientId`: Application (client) ID, found on App Registration > Overview
- `clientSecret`: Secret, found on App Registration > Certificates & secrets
- `tenantId`: Directory (tenant) ID, found on App Registration > Overview
- `domainHint` (optional): Typically the same as `tenantId`.
Leave blank if your app registration is multi tenant.
When specified, this reduces login friction for users with accounts in multiple tenants by automatically filtering away accounts from other tenants.
For more details, see [Home Realm Discovery](https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/home-realm-discovery-policy)
## Outbound Network Access