Setting up openID authentication code flow with Entra OAuth (AzureAD)

I am trying to setup Entra ID authentication through the OpenID plugin. Flow is Authorization Code Flow with PKCE. I have setup plugin configuration correctly (see the image below). After the whole OAuth flow I am redirected to Redirect Log In page.

I am redirected to the Redirect Log In page with a “code” query parameter. When I check the Plugin data my user object is filled with null properties and isAuthenticated is true.

Is this a bug, or do I need to call Microsoft api to get id_token, set this id_token inside the user object and then call the Fetch User Action/change some config in the Azure?

This is the authentication data

image

Hi @Chimera :wave:

Can you show us the login workflow as well? The fact that isAuthenticated is true but you have no user info makes me think there might be a Fetch user action missing but I’m not 100% sure.

Hello!

certainly. On page load of Redirect Log In page I try to fetch user, but it again just returns empty user (as you can see I have the code query parameter in the url as well)