aad-sso-wordpress icon indicating copy to clipboard operation
aad-sso-wordpress copied to clipboard

Azure AD (B2C) - issue in OpenID connector

Open grzegorzszypa opened this issue 6 years ago • 3 comments

Because I use as Azure Application, Azure B2C Application, so I have a problem with customize OpenID connector, because template which was used in configuration is not suitable for my use, and when I put my custom, it does not work.

grzegorzszypa avatar Jun 10 '18 19:06 grzegorzszypa

I discover the issue and it is a problem with supported verion, becaue in current plugin there is this template link: https://login.microsoftonline.com/{tenant-id}/.well-known/openid-configuration

but when I want to use proposed by Azure AD it should be: https://login.microsoftonline.com/{tenant-id}/v2.0/.well-known/openid-configuration and when I use this I got in response "Bad Request"

I also use aadditional configuration, whoch could cause a problem: https://login.microsoftonline.com/{tenant-id}/.well-known/openid-configuration?p=B2C_1A_signup_signin

when I use these which should be used:

https://login.microsoftonline.com/{tenant-id}/v2.0/.well-known/openid-configuration?p=B2C_1A_signup_signin

during signing in by google account I meeting with issue when I use link without "v2.0"

grzegorzszypa avatar Jun 10 '18 19:06 grzegorzszypa

This plugin was not designed to work with Azure AD B2C, or with the Azure AD v2 endpoint, so neither of these have been verified or tested, and I'm not surprised they don't work out of the box.

Have you looked at this plugin, which is specifically for Azure AD B2C? https://github.com/AzureAD/active-directory-b2c-wordpress-plugin-openidconnect

psignoret avatar Jun 10 '18 20:06 psignoret

do you have a plan to support it?

I ask about it, because in your plugin i can map group from Azure AD, but in this another plugin it is not possible :(

If you need donation just tell it :D

And comparing your plugin to this B2C plugin, your is more comprehensiv, so giving support for v2.0 endpoint will be nice.

grzegorzszypa avatar Jun 11 '18 15:06 grzegorzszypa