<a class="reference external image-reference" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/licence-AGPL--3-blue.svg"> </a> <a name="microsoft-graph-oauth-authentication"></a> <h2>Microsoft Graph Oauth Authentication</h2> <p>Allows users to login using Microsoft Graph in Azure AD environments. It is fairly naive, and just tests if the oauth provider is graph.microsoft.com and if so modifies the oauth request.</p> <a name="installation"></a> <h3>Installation</h3> <p>There are no special installation instructions for this module.</p> <a name="configuration"></a> <h3>Configuration</h3> <p>If using B2B authentication you will need to populate users authentication usernames and complete an oauth provider.</p> <ul class="simple"> <li>Provider name: AzureAD</li> <li>Client ID: &lt;Client ID provided when registering Application&gt;</li> <li>Body: Login with Microsoft</li> <li>Auth URL: <a class="reference external" href="https://login.microsoftonline.com/common/oauth2/v2.0/authorize">https://login.microsoftonline.com/common/oauth2/v2.0/authorize</a></li> <li>Scope: User.Read User.ReadBasic.All</li> <li>Validation URL: <a class="reference external" href="https://graph.microsoft.com/v1.0/me">https://graph.microsoft.com/v1.0/me</a></li> <li>Data URL: &lt;Empty&gt;</li> </ul> <p>The configuration in Azure APP:</p> <ul class="simple"> <li>Enable multi-tenanted in Azure App - setting - properties</li> <li>Required permissions - Windows Azure Active Directory - Grant permissions - Sign in and read user profile, Sign in and read user profile , Access the directory as the signed-in user</li> <li>Required permissions - Microsoft Graph - Grant permissions - Access the directory as the signed-in user, Sign users in , View users' email address</li> <li>Edit manifest - &quot;oauth2AllowImplicitFlow&quot;: true,</li> <li>Redirect URL: <a class="reference external" href="https:/">https:/</a>/&lt;yourodoopublicdomain&gt;/auth_oauth/signin</li> </ul> <p>If you like to enable user to signup, just turn on the B2C login in odoo - setting - Users - Customer Account</p> <a name="usage"></a> <h3>Usage</h3> <ul class="simple"> <li>Prior to first login, user must exist in Odoo if signup not enabled. You must also &quot;Send an invitation&quot; to reset password which user must complete.</li> <li>User selects Login with Microsoft at login screen to authenticate.</li> </ul> <a name="known-issues-roadmap"></a> <h3>Known issues / Roadmap</h3> <p>Ideally this module shouldn't be required and will be deprecated as soon as Odoo supports AZUREAD logins.</p> <p>For v13, it is nothing to change. Please let us know the issue if any happened.</p> <a name="bug-tracker"></a> <h3>Bug Tracker</h3> <p>Bugs are tracked on <a class="reference external" href="https://github.com/odoonz/account/issues">GitHub Issues</a>. In case of trouble, please check there if your issue has already been reported. If you spotted it first, help us smashing it by providing a detailed and welcomed feedback.</p> <a name="credits"></a> <h3>Credits</h3> <a name="contributors"></a> <h4>Contributors</h4> <ul class="simple"> <li>Graeme Gellatly &lt;<a class="reference external" href="mailto:graeme&#64;o4sb.com">graeme&#64;o4sb.com</a>&gt;</li> <li>Chris Mann &lt;<a class="reference external" href="https://github.com/chrisandrewmann">https://github.com/chrisandrewmann</a>&gt;</li> </ul> <a name="maintainer"></a> <h4>Maintainer</h4> <p>This module is maintained by Open for Small Business Ltd.</p> <p>Open for Small Business is a small developer and integrator of Odoo software since 2009.</p>