Download the PHP package etracksystems/socialite-azure-app without Composer
On this page you can find all versions of the php package etracksystems/socialite-azure-app. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download etracksystems/socialite-azure-app
More information about etracksystems/socialite-azure-app
Files in etracksystems/socialite-azure-app
Package socialite-azure-app
Short Description Laravel Socialite provider for Oauth using azure, but scoped to a specific app api, allowing custom azure policies to be applied. Rather than using the MS graph endpoint which mean policies would have to be applied to that instead of the app
License
Informations about the package socialite-azure-app
Socialite Azure App Driver
Overview
The purpose of this provider is to provide Azure Oauth where you can apply Condition Access Policies. The default package from scopes to the Graph api in order to get the user details. This doesnt allow Conditional Access Policies to be applied scoped solely to accessing your 3-party app. MS applies the policy to the resource you're access, in this case Graph api, and so, affects users as a whole rather than just when accessing your app.
This provider initially requests a scope just for the app, which allows the policies to applied scoped to just this context. In the callback, the token is exchanged for a Graph one, which then allow us to query the Graph endpoint to get the user details.
Installation & Basic Usage
Azure
Register an App with Microsoft Entra ID. Expose an API endpoint on that app, and make sure to keep the Application ID URI as the client id, example:
Add a scope to this endpoint with the name . A custom name can be used, but remember to provide the value in your ENV setup under the key . Its this scope that is initially requested in the oauth flow.
Please see the Base Installation Guide, then follow the provider specific instructions below.
Add configuration to your config/services.php
Usage
You should now be able to use the provider like you would regularly use Socialite (assuming you have the facade installed):
To logout of your app and Azure:
Returned User fields
idnameemail
Advanced usage
In order to have multiple / different Active directories on Azure (i.e. multiple tenants) The same driver can be used but with a different config:
This also applies to the callback for getting the user credentials that one has to remember to inject the -method i.e.: