Configuration SSO with Azure AD

[IT-META]

Hi community,

I want to configure my fresh inventree installation with Azure AD SSO. I read the documentation and add the line in my .env file :

social_backends:
allauth.socialaccount.providers.microsoft

But when i connect to admin console, I can't add any Provider !

Thanks for your help

[SchrodingersGat]

But when i connect to admin console, I can't add any Provider !

The admin console in InvenTree, you mean? Can you please provide some screenshots showing what you are trying to do

[IT-META]

Hello,

Yes it is since the inventree admin console

[SchrodingersGat]

I read the documentation and add the line in my .env file

Firstly, this should be in your config.yaml file (not the .env file). And secondly the format is wrong.

From the docs page the format (in your config.yaml file) should look like this:

social_backends:
  - allauth.socialaccount.providers.microsoft

If you look at the default configuration file it has it already setup (except it is commented out)

[IT-META]

Hello,

I have this error now : validating /etc/inventree/docker-compose.yml: (root) Additional property social_backends is not allowed

[SchrodingersGat]

Can you please provide the full error? It is probably a yaml formatting issue - use the config template file (linked above) as an example

[IT-META]

Hello,
It works !
I didn't configure the right file....
Thanks for your help.

[IT-META]

I have another problem yet. It seems that the CallbackUri that I have configured on the tenant is not the good. I have this error:
AADSTS50011: The redirect URI 'https://inventree.intra.test.com/accounts/microsoft/login/callback/' specified in the request does not match the redirect URIs configured for the application 'b127666d-ed56-5532-9834-54re38v154'. Make sure the redirect URI sent in the request matches one added to your application in the Azure portal. Can I have to create a new ticket ?

[matmair]

That is a config error on Entra side, probably in the callback set there.
We can not really help you with your Entra ID setup, that is very dependent on your tenant policies.