temporalio / temporalio/ui

Unable to setup external Auth to Microsoft Azure AD (Entra)

Open
#1,818 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
TypeScript
Stars
431
Forks
179
Avg merge
2d 9h
Merged PRs (30d)
71

Description

Describe the bug
Previously I've been using Okta as external Oauth2 provider.
Now I want to use Entry (Microsoft Azure AD) but when setting it up it doesn't work.
Indeed, while setting the necessary TEMPORAL_AUTH_PROVIDER_URL, TEMPORAL_AUTH_CLIENT_ID, TEMPORAL_AUTH_CLIENT_SECRET, it just fails to start the UI server with the following message:

Nothing explicit displayed. When setting it to Okta, everything goes fine, app starts and this message is not displayed.

To Reproduce
Set the required vars:

  • TEMPORAL_AUTH_PROVIDER_URL
  • TEMPORAL_AUTH_CLIENT_ID
  • TEMPORAL_AUTH_CLIENT_SECRET

The Azure AD Auth URL looks like this: "https://login.microsoftonline.com/<company_guid>/oauth2/v2.0/authorize"

Expected behavior
Configure Microsoft Azure AD auth URL and get Temporal UI to start and do the OAuth2 flow.
We could eventually use the well-known endpoint to determine the auth/issuer/signout endpoints, but this is to me the next step.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the Temporal UI startup failure with the three TEMPORAL_AUTH_* variables and the Microsoft Azure AD authorize URL shown in the issue, then compare it with the working Okta setup. Done means the UI starts successfully and completes the OAuth2 flow using Azure AD; no source files or tests are identified in the issue.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, typescript
Domain
authentication, frontend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.