My understanding is that this should be possible with Azure AD from here:
#8
But I'm a bit confused as to how configure this. I managed to link AAD auth for existing matomo users with the following settings
Authorize URL: https://login.microsoftonline.com/{tenant_id}/oauth2/authorize
Token URL: https://login.microsoftonline.com/{tenant_id}/oauth2/token
Userinfo URL: https://login.microsoftonline.com/{tenant_id}/openid/userinfo
Userinfo ID: sub
OAuth Scopes: openid
Do I also need to set OAuth scopes to
"openid email"?
My redirect config is the following:
Redirect URI override: https://mymatmominstance.com/oidc/callback
Ingress manifest (kubernetes ingress)
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
nginx.ingress.kubernetes.io/rewrite-target: /index.php?module=LoginOIDC&action=callback&provider=oidc
labels:
app.kubernetes.io/instance: matomo
app.kubernetes.io/name: matomo
name: matomo2
namespace: prod
spec:
rules:
- host: mymatmominstance.com
http:
paths:
- backend:
serviceName: matomo
servicePort: http
path: /oidc/callback
I also have another ingress for regular / path matching up
If I remove the redirect URI, the AAD login redirects me to
/index.php?module=LoginOIDC&action=callback&provider=oidc&code=....
And I get Unexpected response from OAuth service.
if the redirect URI is set I get redirected to /oidc/callback?code=
Response is: Not Found The requested URL was not found on this server.
My understanding is that this should be possible with Azure AD from here:
#8
But I'm a bit confused as to how configure this. I managed to link AAD auth for existing matomo users with the following settings
Do I also need to set OAuth scopes to
"openid email"?
My redirect config is the following:
Redirect URI override: https://mymatmominstance.com/oidc/callback
Ingress manifest (kubernetes ingress)
I also have another ingress for regular
/path matching upIf I remove the redirect URI, the AAD login redirects me to
/index.php?module=LoginOIDC&action=callback&provider=oidc&code=....And I get
Unexpected response from OAuth service.if the redirect URI is set I get redirected to
/oidc/callback?code=Response is:
Not Found The requested URL was not found on this server.