mod_microsoft
Adds logon using the Microsoft identity platform.
If enabled then on /admin/authentication-services
a panel is added for the Microsoft identity platform.
Here the following can de configured:
- Application ID: as found in the app registration
- Client Secret: as found in the app registration
- Scope: space separated list of scopes that you want the user to consent to. Examples are: email, offline_access and profile. The openid scope is always added automatically. Defaults to
email profile
. - Tenant: Control who can sign in. Allowed values are: common, organizations, consumers, and tenant identifiers. Defaults to
common
.
On the Azure Portal App registrations an App can be registered and configured.
The redirect path for the app is shown on top of the /admin/authentication-services
screen and is of the format: https://example.com/oauth-service/redirect