Microsoft OIDC | SqlOS Docs

Setup#

Register an app in Azure Portal > App Registrations
Under Authentication > Web, add the redirect URI:

PLAINTEXT

http://localhost:5062/sqlos/auth/oidc/callback

Under Certificates & secrets, create a client secret
Create the OIDC connection in SqlOS:

BASH

curl -X POST http://localhost:5062/sqlos/admin/auth/api/oidc-connections \
  -H "Content-Type: application/json" \
  -d '{
    "providerType": "microsoft",
    "displayName": "Microsoft",
    "clientId": "YOUR_AZURE_APP_CLIENT_ID",
    "clientSecret": "YOUR_AZURE_APP_CLIENT_SECRET"
  }'

Enable the connection:

BASH

curl -X POST http://localhost:5062/sqlos/admin/auth/api/oidc-connections/{id}/enable

Seed from code#

To create the connection from a fresh database without the dashboard or curl, seed it at startup:

CSHARP

options.AuthServer.SeedMicrosoftConnection(
    clientId: builder.Configuration["SqlOS:Oidc:Microsoft:ClientId"]!,
    clientSecret: builder.Configuration["SqlOS:Oidc:Microsoft:ClientSecret"]!,
    tenant: "common",
    "http://localhost:5062/sqlos/auth/oidc/callback");

See Social sign-in for seeding behavior and the general SeedOidcConnection form.

See OIDC Social Login for the complete auth flow.