[GitHub] [airflow] alsterman commented on issue #12499: Redirect URI for Airflow to authenticate using Azure AD

[GitBox <gi...@apache.org>]

alsterman commented on issue #12499:
URL: https://github.com/apache/airflow/issues/12499#issuecomment-731145705


   Hi @Silpa-Suresh
   
   I'm using this for airflow 1.10.10 
   
   **Api-permissions:** `graph.microsoft.com/openid`
   **Token configuration:** Add the following optional claims: email, family_name, given_name, upn 
   **Redirect URIs:** I'm using the following, not sure if all are needed. /login, /admin, /oauth-authorized, /oauth-authorized/azure, /home, /
   
   My `webserver_config.py` looks like this:
   ```
   OAUTH_PROVIDERS = [{
       'name':'azure',
       'token_key':'access_token',
       'icon':'fa-windows',
       'remote_app': {
           'base_url': 'https://graph.microsoft.com/v1.0/',
           'request_token_params' :{'scope': 'openid'},
           'access_token_url':'https://login.microsoftonline.com/common/oauth2/token',
           'authorize_url':'https://login.microsoftonline.com/common/oauth2/authorize',
           'request_token_url': None,
           'consumer_key': os.environ.get("OAUTH_SP_AZURE_APPLICATION_ID"),
           'consumer_secret': os.environ.get("OAUTH_SP_AZURE_SECRET"),
       }
   }]
   ```
   
   You have to add the first user using the airflow cli.
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org