Using Azure AD as SSO for Self-hosted Apps?
reddit / selfhosted

----------------------------------------------------------------------
salanalani · 2023-11-12 21:26

So I was thinking to use Authentik or Authelia (OAuth 2.0) as self-
hosted service to be the main SSO for various other apps... but then I
thought since I already have MS Azure AD (newly known As MS Entra ID),
would I able to use that instead... any proper guides on how to use
that with other open source projects such as Guacamole, Home
Assistant, etc...?

Worth mentioning that I have MS 365 Basic/Standard subscription from
GoDaddy (not premium MS 365 subscription), so no MS Intune service and
the Azure AD is not on-premise (all online via entra.microsoft.com).

----------------------------------------------------------------------
ElevenNotes · 2023-11-12 22:02

SAML and you are good to go. Don't forget that you need a public
callback URL with a valid certificate.

----------------------------------------------------------------------
sk1nT7 · 2023-11-12 23:22

You can configure Azure AD in apps that support it directly. However,
many selfhosted projects do not support Oauth/SSO. Therefore, you may
end up using Authentik with Azure AD.

I've documented the setup here:

https://blog.lrvt.de/authentik-traefik-azure-ad/

----------------------------------------------------------------------
salanalani · 2023-11-12 23:37

Thanks, that will really help

----------------------------------------------------------------------
ssddanbrown · 2023-11-13 01:14

Just as another option supported by many self-hosted apps, Azure AD
also supports acting as an OpenID Connect identity provider. Between
OIDC and SAML you can have pretty good coverage.