PF / AzureAD / Graph Integration URLs as customizable fields

[logray]

Hello,

I am requesting a feature to make the URLs for AzureAD integration customizable fields, instead of hard-coded in lib/pf/Authentication/Source/AzureADSource.pm (and related).

The hard coded values of "microsoft.com" and "microsoftonline.com" in AzureADSource.pm (and related) prevent other regions/clouds from using this integration.

I have manually hard coded ".us" suffix in lib/pf/Authentication/Source/AzureADSource.pm variables, and using pftest against a test Azure authentication source shows that the integration functions as expected.

Please refer to this link for a list of URLs:

https://learn.microsoft.com/en-us/graph/deployments

Thank you,

-Logan

[jrouzierinverse]

What line did you change?

[logray]

These three lines in AzureADSource.pm, changed from ".com" to ".us"

27 has 'token_url' => (isa => 'Str', is => 'rw', default => "https://login.microsoftonline.com/%TENANT_ID/oauth2/v2.0/token");
28 has 'user_groups_url' => (isa => 'Str', is => 'rw', default => "https://graph.microsoft.com/v1.0/users/%USERNAME/memberOf");
97 scope => "https://graph.microsoft.com/.default",

And also I changed this line in /lib/pf/services/manager/radiusd_child.pm, but I don't think it is involved in oauth2 (not entirely certain):

900 discovery = "https://login.microsoftonline.com/%{Realm}/v2.0"