Microsoft auth with specific tenant

Questions and Answers Strapi Backend
1

Is there a way to configure a tenant-specific endpoint when using the Microsoft auth provider? I want to limit the api access to only my tenant, which requires me to use
https://login.microsoftonline.com//oauth2/v2.0/authorize
instead of
Sign in to your account

If that’s not possible, where is the file that has this endpoint specified so I can extend it for my case?

2

I believe in this case you will need to use extensions to tweak the api address used with the Grant/Purest. And here Grant must have something statically defined:

1 Like
3

Had same issue, found an older solution for v3 that I implemented like this in v4 : src/index.js with the bootstrap method.

async bootstrap(/*{ strapi }*/) {

    const pluginStore = strapi.store({ type: 'plugin', name: 'users-permissions' })

    // Get actual grant config
    const prevGrantConfig = (await pluginStore.get({ key: 'grant' })) || {}

    // Setup Microsoft grant config
    const endpoint = process.env.MICROSOFT_AUTH_TENANT_ID || 'common'

    const microsoftGrantConfig = {
      authorize_url: `https://login.microsoftonline.com/${endpoint}/oauth2/v2.0/authorize`,
      access_url: `https://login.microsoftonline.com/${endpoint}/oauth2/v2.0/token`
    }

    // Merge previous config and overwrite with our custom Microsoft grant config
    const newGrantConfig = {
      ...prevGrantConfig,
      microsoft: {
        ...prevGrantConfig.microsoft,
        ...microsoftGrantConfig
      }
    }

    // Overwrite grant Config
    await pluginStore.set({key: 'grant', value: newGrantConfig})
  },

Source : Microsoft provider doesn’t work · Issue #3248 · strapi/strapi (github.com)

4

Hi @NateR42,

As you were part of this thread I would like to ask you something.
Do you have any clue how I can solve this issue?