[Koha-devel] Azure configuration for OAuth authentication with Koha

[Alex Buckley]

Hi David,

Ah that might be the problem! The client is using OAuth with Azure 
currently. We have indeed set up using OIDC with Azure before, but we 
haven't used OAuth before with any identity providers.

Thanks for raising that. Are you aware of what IdP OAuth should be used 
with?

Kind regards,

Alex


On 22/05/23 11:27, David Cook wrote:
> Hi Alex,
>
> Do you mean OAuth or OIDC? With Azure you'd want to be using OIDC which I think you folk have set up before with Azure?
>
> When it comes to the URIs you register, you'll want to use a * wildcard at the end of the OpacBaseURL, so that the users are able to login from any page in the Koha OPAC.
>
> David Cook
> Senior Software Engineer
> Prosentient Systems
> Suite 7.03
> 6a Glen St
> Milsons Point NSW 2061
> Australia
>
> Office: 02 9212 0899
> Online: 02 8005 0595
>
> -----Original Message-----
> From: Koha-devel <koha-devel-bounces at lists.koha-community.org> On Behalf Of Alex Buckley
> Sent: Monday, 22 May 2023 6:26 AM
> To: koha-devel <koha-devel at lists.koha-community.org>
> Subject: [Koha-devel] Azure configuration for OAuth authentication with Koha
>
> Hi Koha community,
>
> If you have configured Koha OAuth authentication with Azure could you please let me know what did you configure as the Redirect and Reply URIs in Azure?
>
> Context: We have a library (running Koha 22.11) that is trying to setup OAuth authentication with Azure.
>
> They have configured the Koha end using the new Koha 'Administration' > 'Identity provider' pages.
>
> When this library attempt a SSO login they get a 'AADSTS00113: No reply address is registered for the application' Azure error - see attached.
>
> Should the Redirect and Reply URIs in Azure just be the Koha OpacBaseURL (with https), or something else?
>
> Thanks so much,
>
> Alex
>
-- 
Alex Buckley
Koha Developer | Implementation Lead
Catalyst.Net Limited - Expert Open Source Solutions

Catalyst.Net Limited - a Catalyst IT group company

CONFIDENTIALITY NOTICE: This email is intended for the named recipients only. It may contain privileged, confidential or copyright information. If you are not the named recipient, any use, reliance upon, disclosure or copying of this email or its attachments is unauthorised. If you have received this email in error, please reply via email or call +64 4 499 2267.