Issues with SSO groups and Entra/Azure

I believe I have SSO set up correctly in Azure. I click "Login with Azure" and it takes me to MS where I can log in, but when I'm taken back to Homarr I'm dumped back at the login screen.

Haven't done anything with groups yet as I'm unsure where to define them, at least in Entra/Azure. Can someone point me in the right direction?

OS: Debian LXC
Version: 1.34.0
.env:

AUTH_PROVIDERS=oidc,credentials
AUTH_OIDC_CLIENT_ID=XXXXX
AUTH_OIDC_CLIENT_SECRET=YYYYY
AUTH_OIDC_ISSUER=https://login.microsoftonline.com/ZZZZZ/v2.0
AUTH_OIDC_CLIENT_NAME=Azure
AUTH_OIDC_SCOPE_OVERWRITE=openid email profile
AUTH_OIDC_GROUPS_ATTRIBUTE=roles

AUTH_PROVIDERS=oidc,credentials
AUTH_OIDC_CLIENT_ID=XXXXX
AUTH_OIDC_CLIENT_SECRET=YYYYY
AUTH_OIDC_ISSUER=https://login.microsoftonline.com/ZZZZZ/v2.0
AUTH_OIDC_CLIENT_NAME=Azure
AUTH_OIDC_SCOPE_OVERWRITE=openid email profile
AUTH_OIDC_GROUPS_ATTRIBUTE=roles

AUTH_PROVIDERS=oidc,credentials
AUTH_OIDC_CLIENT_ID=XXXXX
AUTH_OIDC_CLIENT_SECRET=YYYYY
AUTH_OIDC_ISSUER=https://login.microsoftonline.com/ZZZZZ/v2.0
AUTH_OIDC_CLIENT_NAME=Azure
AUTH_OIDC_SCOPE_OVERWRITE=openid email profile
AUTH_OIDC_GROUPS_ATTRIBUTE=roles

AUTH_PROVIDERS=oidc,credentials
AUTH_OIDC_CLIENT_ID=XXXXX
AUTH_OIDC_CLIENT_SECRET=YYYYY
AUTH_OIDC_ISSUER=https://login.microsoftonline.com/ZZZZZ/v2.0
AUTH_OIDC_CLIENT_NAME=Azure
AUTH_OIDC_SCOPE_OVERWRITE=openid email profile
AUTH_OIDC_GROUPS_ATTRIBUTE=roles

Issues with SSO groups and Entra/Azure

Similar Threads

Similar Threads

Similar Threads