Unable to login to application with another tenant's Email

[hatifmujahid]

Hi,

I wanted some help to be able to have multi-tenant login using Django-Auth-ADFS. Our usecase is to login to a web application using Microsoft SSO whereby the email of the person logging in is matched with already existing users and this creates a JWT token for web access.

I have setup the app registration in azure as multi-tenant. I am also attaching the AUTH_ADFS in settings.py

AUTH_ADFS = {
"AUDIENCE": "common",
"CLIENT_ID": CLIENT_ID,
"CLIENT_SECRET": CLIENT_SECRET,
"TENANT_ID": TENANT_ID,
"RELYING_PARTY_ID": CLIENT_ID,
"RESOURCE": CLIENT_ID,
"USERNAME_CLAIM": "upn",
"CLAIM_MAPPING": {

},
"GROUPS_CLAIM": "roles",
"MIRROR_GROUPS": True,
"LOGIN_EXEMPT_URLS": ["api/logout", "public/"],

}

Can anyone help I am really stuck with this.

[tim-schilling]

I don't have the availability to help you build this. It should be possible though. Take it in pieces:

1. Start a new django app
2. Integrate django-auth-adfs so it authenticates and uses the default session logic with the various tenants
3. Make the changes to use JWTs (not sure what you're doing there, there may be more steps involved here)
4. Once you have your proof of concept working, port the logic back over to your larger application