Search 1.8 billion lines of Odoo code on GitHub
auth_oauth_microsoft_graph
| Author: | Open For Small Business Ltd |
|---|---|
| License: | AGPL-3 |
| Branch: | 16.0-wip |
| Repository: | odoonz/odoonz-addons |
| Dependencies: | auth_oauth |
| Languages: | Python (29, 35.8%), and reStructuredText (52, 64.2%) |
| Other branches: | 11.0, 12.0, 12.0-greenify-gdg, 12.0-no-translate, 13.0, 14.0, 14.0-partner-lock, 15.0, and gdg-pricelist-rework |
| Other repositories: | RL-OtherApps/odoonz-addons, RujiaL/odoonz-addons, cherryservers/odoonz-addons, erick-alvino/odoonz-addons, gameboy199/odoonz-addons, grottas/odoonz-addons, jonisunz/odoonz-addons, robotiko/odoonz-addons, sondt87/odoonz-addons, suningwz/odoonz-addons, timsmet/odoonz-addons, vanthaiunghoa/odoonz-addons, vidtsin/odoonz-addons, wtaferner/odoonz-addons, xuanthanh/odoonz-addons, and yasmanycastillo/odoonz-addons |
Microsoft Graph Oauth Authentication
Allows users to login using Microsoft Graph in Azure AD environments. It is fairly naive, and just tests if the oauth provider is graph.microsoft.com and if so modifies the oauth request.
Installation
There are no special installation instructions for this module.
Configuration
If using B2B authentication you will need to populate users authentication usernames and complete an oauth provider.
- Provider name: AzureAD
- Client ID: <Client ID provided when registering Application>
- Body: Login with Microsoft
- Auth URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize
- Scope: User.Read User.ReadBasic.All
- Validation URL: https://graph.microsoft.com/v1.0/me
- Data URL: <Empty>
The configuration in Azure APP:
- Enable multi-tenanted in Azure App - setting - properties
- Required permissions - Windows Azure Active Directory - Grant permissions - Sign in and read user profile, Sign in and read user profile , Access the directory as the signed-in user
- Required permissions - Microsoft Graph - Grant permissions - Access the directory as the signed-in user, Sign users in , View users' email address
- Edit manifest - "oauth2AllowImplicitFlow": true,
- Redirect URL: https://<yourodoopublicdomain>/auth_oauth/signin
If you like to enable user to signup, just turn on the B2C login in odoo - setting - Users - Customer Account
Usage
- Prior to first login, user must exist in Odoo if signup not enabled. You must also "Send an invitation" to reset password which user must complete.
- User selects Login with Microsoft at login screen to authenticate.
Known issues / Roadmap
Ideally this module shouldn't be required and will be deprecated as soon as Odoo supports AZUREAD logins.
For v13, it is nothing to change. Please let us know the issue if any happened.
Bug Tracker
Bugs are tracked on GitHub Issues. In case of trouble, please check there if your issue has already been reported. If you spotted it first, help us smashing it by providing a detailed and welcomed feedback.
Credits
Contributors
- Graeme Gellatly <graeme@o4sb.com>
- Chris Mann <https://github.com/chrisandrewmann>
Maintainer
This module is maintained by Open for Small Business Ltd.
Open for Small Business is a small developer and integrator of Odoo software since 2009.