Authentication with Microsoft Azure AD in a multi-tenant app
Following the documentation, registered an application with Accounts in any organizational directory. The Tenant where the application resides is in "Default Directory" and has only one user, tiagomartinsperes@gmail.com. Also, the app has user assignment (as pointed out here) set to No
After, created another Tenant (different directory) and invited the external user me@tiagoperes.eu. That's the user I'm getting troubles logging into the previously created app.
Then, enable the OAuth2 support using social_core.backends.azuread.AzureADOAuth2 (from here).
As I try to authenticate now, it works well with tiagomartinsperes@gmail.com but with me@tiagoperes.eu gives the following error
Selected user account does not exist in tenant 'Default Directory' and cannot access the application 'a9a22676-8a1c-4297-95d3-8cd89553220e' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account.
The problem is the URL the user is redirected to. According to the docs, multi-tenant applications should redirect to https://login.microsoftonline.com/organizations.
As we see in the Python Social Auth AzureADOAuth2 class, the BASE_URL is
BASE_URL = "https://{authority_host}/{tenant_id}"
Since authority_host = "https://login.microsoftonline.com/" and tenant_id="common", we'd get the wrong url.
Changing that and signing in with the same user and now I get a request to add the permissions
- Override CSS when Debug=True
- Is this the correct way of making primary keys in django?
- How to implement sorting in Django Admin for calculated model properties without writing the logic twice?
- Overwrite django rest response for return only pk
- Which is the best way on AWS to set up a CI/CD of a Django app from GitHub?
- Build a pre-decorated class with override_settings for faster client.login?
- zsh: command not found: django-admin when starting a django project
- django-admin command not working in Mac OS
- Show undefined variable errors in Django templates?
- Django: Pass model ID to url using bootstrap modal
- ImportError: No module named django_extensions
- Compress Python objects before saving to cache
- How can I add bootstrap styles to my django form?
- Django get and use instance and field name on upload_to
- Django reverse ForeignKey returns None
- Migration admin.0001_initial is applied before its dependency app.0001_initial on database 'default'
- How do I connect to my Django local webserver using another device through ip address?
- how can i schedule expo notifications from python
- Django 5.0: How GeneratedField actually works?
- How to revoke refresh token on password reset?
- Django Local Settings
- Import Error while using python manage.py migrate command
- No output in serializermethodfield()
- Django - Authentication - redirect
- How to change hx-get value dynamically?
- Find Template in django
- Django ALLOWED_HOSTS for Amazon ELB
- WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8)
- How to group the choices in a Django Select widget?
- ImproperlyConfigured SECRET_KEY error using django-environ