Any plan to support Azure AD w/ Tenancy?

Archives AWX Project
,
1

Hi! I’m trying to get Azure AD working on AWX, and I can’t seem to find a way to change the loginmicrosoft.com/common/oauth2 URL to:

loginmicrosoft.com/{tenant-id}/oauth2/v2.0/authorize

Looks like the social-auth backend is not here(for azure tenancy):

https://github.com/ansible/awx/blob/ce65ed0ac62f95f96220f073c21cf103ea142285/awx/settings/defaults.py#L349

https://python-social-auth.readthedocs.io/en/latest/backends/azuread.html#tenant-support

AUTHENTICATION_BACKENDS = ( ... 'social_core.backends.azuread_tenant.AzureADTenantOAuth2',
...
)
2

I don’t think you need to actually change the url, you can just create an app that is only valid for your org ("sign-in audience" https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app)

Greetings

Klaas