paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 42 Packages Projects Releases Wiki Activity

Fixes #26503 Add skipUserProfile flag to Microsoft authenticator

Browse Source 
Signed-off-by: Jordan Slott <jordan.slott@twosigma.com>
This commit is contained in:
Jordan Slott
2024-09-27 16:16:30 -04:00
parent 31c28dbc75
commit daa02d6e64
6 changed files with 60 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/auth/microsoft/provider.md
+1
View File
@@ -86,6 +86,7 @@ The Microsoft provider is a structure with three mandatory configuration keys:
When specified, this reduces login friction for users with accounts in multiple tenants by automatically filtering away accounts from other tenants.
For more details, see [Home Realm Discovery](https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/home-realm-discovery-policy)
- `additionalScopes` (optional): List of scopes for the App Registration, to be requested in addition to the required ones.
- `skipUserProfile` (optional): If true, skips loading the user profile even if the `User.Read` scope is present. This is a performance optmization during login and can be used with resolvers that only needs the email address in `spec.profile.email` obtained when the `email` OAuth2 scope is present.
### Resolvers