You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Justin (Jira)" <ji...@apache.org> on 2023/09/11 19:54:00 UTC
[jira] [Updated] (NIFI-12037) AzureGraphUserGroupProvider does not work with regional Azure instances

     [ https://issues.apache.org/jira/browse/NIFI-12037?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Justin updated NIFI-12037:
--------------------------
    Description: 
When configuring the AzureGraphUserGroupProvider for clouds other than the Azure global service cloud ([https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-national-cloud)] all of the necessary endpoints are not updated so the graph endpoint stays as graph.microsoft.com instead of using the associated endpoint for the regional clouds.  To keep implementation simple the graph endpoint and scope in "ClientCredentialAuthProvider.java" and "AzureGraphUserGroupProvider.java" from the nifi-azure-bundle can be exposed to the configuration file, keeping the current defaults, but allowing them to be changed when necessary.

PR: https://github.com/apache/nifi/pull/7675

  was:When configuring the AzureGraphUserGroupProvider for clouds other than the Azure global service cloud ([https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-national-cloud)] all of the necessary endpoints are not updated so the graph endpoint stays as graph.microsoft.com instead of using the associated endpoint for the regional clouds.  To keep implementation simple the graph endpoint and scope in "ClientCredentialAuthProvider.java" and "AzureGraphUserGroupProvider.java" from the nifi-azure-bundle can be exposed to the configuration file, keeping the current defaults, but allowing them to be changed when necessary.


> AzureGraphUserGroupProvider does not work with regional Azure instances
> -----------------------------------------------------------------------
>
>                 Key: NIFI-12037
>                 URL: https://issues.apache.org/jira/browse/NIFI-12037
>             Project: Apache NiFi
>          Issue Type: Bug
>            Reporter: Justin
>            Priority: Blocker
>              Labels: authorization, azure
>
> When configuring the AzureGraphUserGroupProvider for clouds other than the Azure global service cloud ([https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-national-cloud)] all of the necessary endpoints are not updated so the graph endpoint stays as graph.microsoft.com instead of using the associated endpoint for the regional clouds.  To keep implementation simple the graph endpoint and scope in "ClientCredentialAuthProvider.java" and "AzureGraphUserGroupProvider.java" from the nifi-azure-bundle can be exposed to the configuration file, keeping the current defaults, but allowing them to be changed when necessary.
> PR: https://github.com/apache/nifi/pull/7675



--
This message was sent by Atlassian Jira
(v8.20.10#820010)