matomo-plugin-LoginOIDC icon indicating copy to clipboard operation
matomo-plugin-LoginOIDC copied to clipboard

Update FAQ for Microsoft Office365 / Azure AD

Open surphil opened this issue 4 years ago • 6 comments

I tested this credentials for Office 365 with oauth2/v2.0 and graph.microsoft.com and it works without modifying the server routes (I 'm not familiar with Azure ID so it would be nice if someone can confirm this):

  • Authorize URL: https://login.microsoftonline.com/{tenant_id}/oauth2/v2.0/authorize
  • Token URL: https://login.microsoftonline.com/{tenant_id}/oauth2/v2.0/token
  • Userinfo URL: https://graph.microsoft.com/oidc/userinfo
  • Userinfo ID: sub
  • OAuth Scopes: openid email
  • Redirect URI Override: (empty)

surphil avatar Apr 23 '20 21:04 surphil

I configured it today but get the following error when redirected to Matomo: The parameter 'state' isn't set in the Request, and a default value wasn't provided.

se00059 avatar May 12 '20 19:05 se00059

I have the same issue, also get "The parameter 'state' isn't set in the Request, and a default value wasn't provided." Just updated Matomo and the Plugin Version 0.1.5 seems to be latest version. My Matomo configuration looks perfect, does anyone have any advice what's going wrong here?

dotcologne avatar Jul 14 '20 14:07 dotcologne

Hello and Thanks for update. The rewirte rule for apache is:

<IfModule mod_rewrite.c>
    # Tell PHP that the mod_rewrite module is ENABLED.
    SetEnv HTTP_MOD_REWRITE On
    
    RewriteEngine on

    #main pages
    RewriteRule oidc/callback /analytics/index.php?module=LoginOIDC&action=callback&provider=oidc  [QSA, R]
</IfModule>

and works Perfect.

DenisHoppe avatar Jul 27 '20 11:07 DenisHoppe

For the rewrite issue see my comment in https://github.com/dominik-th/matomo-plugin-LoginOIDC/issues/24

dotcologne avatar Jul 30 '20 14:07 dotcologne

Hi all, I have same problem with nginx, on login i receive a state mismatch error. Do you have any news for this problem?

MdreW avatar Nov 30 '22 13:11 MdreW

Same problem with authentik and a rewrite rule on nginx didn't help at all.

ToeiRei avatar Mar 04 '23 18:03 ToeiRei