# How to setup Azure AD Authentication in AWX installed with operator in kubernetes?

**URL:** <https://forum.ansible.com/t/how-to-setup-azure-ad-authentication-in-awx-installed-with-operator-in-kubernetes/3217>\
**Category:** Get Help\
**Tags:** azure, awx-operator, collections, awx, kubernetes\
**Created:** [January 9, 2024, 1:09pm UTC](https://forum.ansible.com/t/how-to-setup-azure-ad-authentication-in-awx-installed-with-operator-in-kubernetes/3217 "2024-01-09T13:09:07Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![iamraj007](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/iamraj007/32/1941_2.png) [@iamraj007](https://forum.ansible.com/u/iamraj007)\
**Post date:** [January 9, 2024, 1:09pm UTC](https://forum.ansible.com/t/how-to-setup-azure-ad-authentication-in-awx-installed-with-operator-in-kubernetes/3217/1 "2024-01-09T13:09:07Z")

</div>

How to enable Azure AD Authentication SSO in AWX installed with operator in kubernetes?

I am running Azure AKS  
k8 ver:1.26.6  
awx:23.6.0  
awx-operator:2.10.0  
AWX is exposed via nginx ingress and Azure LB (exp [awx.compnaydomain.com](http://awx.compnaydomain.com))

If i go to Settings\>Authentication\> Azure AD settings

I see below filed:

- Azure AD OAuth2 Callback URL (it have uneditable URL: [https://towerhost/sso/complete/azuread-oauth2/](https://towerhost/sso/complete/azuread-oauth2/)) : How do we update this my domain

- Azure AD OAuth2 Key: [editable] (Will enter my ADD Client ID i got in ADD)

- Azure AD OAuth2 Secret: [editable] (Will enter my ADD Secret ID i got in ADD)

- Azure AD OAuth2 Organization Map

- Azure AD OAuth2 Team Map

Please see image below:

 ![AWX 2024-01-09 13_49_22-AWX _ Azure AD and 30 more pages - Work - Microsoft​ Edge](https://us1.discourse-cdn.com/ansible/original/2X/6/68338b81601a5bac8b06300677a66f0bfb9109c9.png)

Can someone please suggest how do we edit “Azure AD OAuth2 Callback URL” in Azure AD settings to enable AD based login?

---

<div class="post-metadata">

**Author:** ![thedoubl3j](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/thedoubl3j/32/103_2.png) [@thedoubl3j](https://forum.ansible.com/u/thedoubl3j)\
**Post date:** [January 10, 2024, 7:55pm UTC](https://forum.ansible.com/t/how-to-setup-azure-ad-authentication-in-awx-installed-with-operator-in-kubernetes/3217/2 "2024-01-10T19:55:57Z")

</div>

hey @iamraj007 you can edit that default value in your awx settings, see [28. AWX Tips and Tricks — Ansible AWX community documentation](https://ansible.readthedocs.io/projects/awx/en/latest/administration/tipsandtricks.html#configuring-the-awxhost-hostname-for-notifications) for guidance.

---

<div class="post-metadata">

**Author:** ![iamraj007](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/iamraj007/32/1941_2.png) [@iamraj007](https://forum.ansible.com/u/iamraj007)\
**Post date:** [January 11, 2024, 10:36am UTC](https://forum.ansible.com/t/how-to-setup-azure-ad-authentication-in-awx-installed-with-operator-in-kubernetes/3217/3 "2024-01-11T10:36:07Z")

</div>

Thanks Jake.  
I overlooked the conf on UI was expecting some cm/db entry to update for this.

Cheers

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [February 10, 2024, 10:36am UTC](https://forum.ansible.com/t/how-to-setup-azure-ad-authentication-in-awx-installed-with-operator-in-kubernetes/3217/4 "2024-02-10T10:36:32Z")

</div>

Closed on February 10, 2024, 10:36am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
