public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

AzureAD: Add option to force fetch the groups from the Graph API (#56916) (#56947)

Browse Source 
* AzureAD: Add option to force fetch the groups from the Graph API (#56916)

* Add a new option to systematically fetch AzureAD groups from the Graph API

(cherry picked from commit 0f4d126109)

* Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread.md

Co-authored-by: Ursula Kallio <ursula.kallio@grafana.com>

Co-authored-by: Ursula Kallio <ursula.kallio@grafana.com>
This commit is contained in:
Gabriel MABILLE
2022-10-14 14:06:44 +02:00
committed by GitHub
co-authored by Ursula Kallio
parent d78f259ee8
commit 5a17ef9d6c
5 changed files with 101 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/sources/setup-grafana/configure-security/configure-authentication/azuread.md
+8
View File
@@ -225,3 +225,11 @@ Grafana attempts to retrieve the user's group membership by calling the included
> Note: The token must include the `GroupMember.Read.All` permission for group overage claim calls to succeed.
> Admin consent may be required for this permission.
### Force fetching groups from Microsoft graph API
To force fetching groups from Microsoft Graph API instead of the `id_token`, use the `force_use_graph_api` configuration option.
```
force_use_graph_api = true
```