O365 Azure AD Auth

JezzB

Hi all, first of all I'd like to say how great the Flarum forum app is.
I've spent the last couple of days trying to get O365 Azure AD auth set up with my new setup as I need it for a small closed access company forum, but sadly I've failed so far.
I tried a couple of 'Microsoft' extensions to fof/oauth but no luck at all with them.

I've just got fof/passport plugged in and running the auth successfully, but at the end of the auth process I get screen with 'An error occurred while trying to load this page.'

Auth process passed

Auth not passed to app

I'm getting this error in the logs too.

[2024-01-15 20:09:43] flarum.ERROR: TypeError: Flarum\Forum\Auth\ResponseFactory::make(): Argument #2 ($identifier) must be of type string, null given, called in /var/www/flarum/vendor/fof/passport/src/Controllers/PassportController.php on line 105 and defined in /var/www/flarum/vendor/flarum/core/src/Forum/Auth/ResponseFactory.php:36

Is there any chance someone out there could help me get this working please?
It would be very much appreciated. Thanks.
...and here's the info from my installation.

Flarum core: 1.8.5
PHP version: 8.1.2-1ubuntu2.14
MySQL version: 10.6.12-MariaDB-0ubuntu0.22.04.1
Loaded extensions: Core, date, libxml, openssl, pcre, zlib, filter, hash, json, pcntl, Reflection, SPL, session, standard, sodium, mysqlnd, PDO, xml, bcmath, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, iconv, exif, mysqli, pdo_mysql, Phar, posix, readline, shmop, SimpleXML, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, Zend OPcache
+----------------------------------+---------+--------+
| Flarum Extensions                |         |        |
+----------------------------------+---------+--------+
| ID                               | Version | Commit |
+----------------------------------+---------+--------+
| flarum-tags                      | v1.8.0  |        |
| flarum-suspend                   | v1.8.1  |        |
| flarum-sticky                    | v1.8.0  |        |
| flarum-nicknames                 | v1.8.0  |        |
| flarum-lock                      | v1.8.0  |        |
| afrux-forum-widgets-core         | v0.1.7  |        |
| flarum-markdown                  | v1.8.0  |        |
| michaelbelgium-discussion-views  | v7.2.1  |        |
| littlecxm-whisper                | 0.1.5   |        |
| kilowhat-audit-free              | 1.7.0   |        |
| justoverclock-purify             | 0.1.7   |        |
| justoverclock-custom-html-widget | 0.1.4   |        |
| imdong-anti-change-email         | v1.0.2  |        |
| ianm-log-viewer                  | 0.1.1   |        |
| fof-upload                       | 1.5.4   |        |
| fof-reactions                    | 1.3.5   |        |
| fof-profile-image-crop           | 1.1.6   |        |
| fof-polls                        | 2.1.2   |        |
| fof-passport                     | 1.1.1   |        |
| fof-nightmode                    | 1.5.3   |        |
| fof-merge-discussions            | 1.4.1   |        |
| fof-geoip                        | 1.4.1   |        |
| fof-forum-statistics-widget      | 1.2.1   |        |
| fof-formatting                   | 1.0.3   |        |
| fof-drafts                       | 1.2.10  |        |
| fof-default-group                | 1.1.2   |        |
| fof-best-answer                  | 1.4.1   |        |
| flarum-subscriptions             | v1.8.0  |        |
| flarum-statistics                | v1.8.0  |        |
| flarum-mentions                  | v1.8.3  |        |
| flarum-likes                     | v1.8.0  |        |
| flarum-lang-english              | v1.8.0  |        |
| flarum-extension-manager         | v1.0.0  |        |
| flarum-emoji                     | v1.8.0  |        |
| flarum-bbcode                    | v1.8.0  |        |
| ffans-clipboardjs                | v1.0.0  |        |
| darkle-fancybox                  | 1.1.2   |        |
| clarkwinkelmann-circle-groups    | 1.0.1   |        |
| blomstra-turnstile               | 0.1.4   |        |
| askvortsov-checklist             | v1.3.1  |        |
| askvortsov-categories            | v3.0.9  |        |
| afrux-news-widget                | v0.1.1  |        |
+----------------------------------+---------+--------+
Base URL: .....................
Installation path: /var/www/flarum
Queue driver: sync
Session driver: file
Scheduler status: Active
Mail driver: smtp
Debug mode: off

clarkwinkelmann

fof/passport expects the API payload about the current user to be in a certain format used by Laravel. This is outside of the OAuth flow so every app might return data in a different format.

I don't remember whether FoF Passport allows customizing the parsing of the "get me" API payload. You might need to write your own oauth server handler to make and parse the requests to Azure API. Most likely there is already a League PHP driver for Azure which could be integrated into a new FoF OAuth companion extension rather than trying to adapt Passport.

JezzB

Thanks for your reply Clark. That's a shame, as I thought I was so close to getting it working. I'm not a coder, so not really any chance of me getting it fixed on my own.
I've looked through all the extensions published on Extiverse, and tried everything that looks like it might work with no luck. Has anyone seen anything out there that might work for me?
Thanks again for your help.

GreXXL

JezzB I think @IanM has been working on an Active Directory integration a while back when Flarum was still in Beta. If you want, you could create aProposals to reinvest time to publish an AD/Azure AD integration for Flarum so that it could be used in more cooperate environments. With the help of aBounty maybe some who are looking for this could push this on the top of the priority list.