provider="azure"
cookie_secret="SECRETSECRET1234"
client_id="<azure client id>"
client_secret="<azure client secret>"
azure_tenant="<azure tenant id>"
oidc_issuer_url="https://login.microsoftonline.com/<azure tenant id>/v2.0"
email_domains=["*"]
http_address="0.0.0.0:4180"
ssl_upstream_insecure_skip_verify="true"
upstreams=[ "http://local-prometheus:9090/" ]
skip_jwt_bearer_tokens="true"
extra_jwt_issuers="https://sts.windows.net/<azure tenant id>/=https://prometheus.monitor.azure.com"
skip_auth_routes=[ "/api/v1/status/buildinfo" ]