Peng Ren

just re-run "superset init"

I faced the same issue. If add upn in scope like this: "scope": "openid email profile upn", the error message occur as below: The application 'xxxxxxxx' asked for scope 'upn'...

@krionbsd just remove "upn" from client_kwargs > scope, like this: "client_kwargs": { "scope": "User.read name preferred_username email profile",

> > User.read name preferred_username email profile > > I don't have upn in client_kwargs scope, but instead `'scope': 'openid profile email groups',` That's strange. Please check if "user_info_mapping" was...

@georgewfisher If you are trying to config AAD in Superset, you could refer to this: [Config Superset](https://superset.apache.org/docs/installation/configuring-superset) > Custom OAuth2 Configuration. Write a CustomSsoSecurityManager to resolve FAB AAD issue. Here...