Moin Moin, does anyone have experience using Azure Active Directory (AD) as an authentication provid

UL6Q0LYJ3

Moin Moin, does anyone have experience using Azure Active Directory (AD) as an authentication provider for ZED-Users and would you like to share his experience with me? I want to authenticate the users against the AD and synchronize the Sprkyer- with the AD groups. Thx

UMVENKCBF

Yes would be nice if someone can provide information 🙂
Also interested in..

Christian von Schassen

Hi Fred and Marcus, I spoke to someone I know who did this before. He will probably give me feedback at the end of this week, as he's busy the next few days.

Christian von Schassen

I will then come back here or even ask him to write it himself

UL6Q0LYJ3

awesome - thx!

Unknown

Hi, guys! Sorry it took me so long to get here.
In our project we actually used Azure AD B2C for login/registration. However we also had to use Azure AD to fetch user data afterwards.

Regarding ZED users login, you need same as \Spryker\Zed\Auth\Business\Model\Auth::authenticate but instead of the first part of the method you need to catch redirect from azure and then login/create user with proper data, obtained from azure(maibe in a separate call)

I believe the following article may help, if you check python example there https://docs.microsoft.com/en-us/azure/active-directory/develop/scenario-web-app-sign-user-overview?tabs=python

I didn’t have experience with groups, so can’t help here.

Also, maybe next links will give you some hints(note: we didn’t use Azure AD Graph API):
https://github.com/microsoftgraph/msgraph-sdk-php
https://docs.microsoft.com/en-us/graph/api/resources/groups-overview?view=graph-rest-1.0