PHPackages magedevgroup/module-admin-sso-azure - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Authentication & Authorization](/categories/authentication) 4. / 5. magedevgroup/module-admin-sso-azure ActiveMagento2-module[Authentication & Authorization](/categories/authentication) magedevgroup/module-admin-sso-azure =================================== Microsoft Entra ID (Azure AD) provider plugin for Magento 2 admin SSO — supplies the Entra OIDC preset (discovery, groups claim, branding) for the provider-agnostic admin-sso capability. Installs admin-sso (and sso-core) automatically. 0.0.1(1mo ago)00OSL-3.0PHPPHP ~8.3.0||~8.4.0||~8.5.0 Since Jul 9Pushed 1mo agoCompare [ Source](https://github.com/MageDevGroup-com/module-admin-sso-azure)[ Packagist](https://packagist.org/packages/magedevgroup/module-admin-sso-azure)[ RSS](/packages/magedevgroup-module-admin-sso-azure/feed)WikiDiscussions master Synced 1w ago READMEChangelogDependencies (3)Versions (2)Used By (0) MageDevGroup\_AdminSsoAzure =========================== [](#magedevgroup_adminssoazure) > Microsoft Entra ID (Azure AD) login for the Magento 2 admin panel. [![License](https://camo.githubusercontent.com/83286826e7422502369a480c1cbde06eae433c866ac3e9054835db7296a11c9c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4f534c2d2d332e302d677265656e)](https://camo.githubusercontent.com/83286826e7422502369a480c1cbde06eae433c866ac3e9054835db7296a11c9c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4f534c2d2d332e302d677265656e) [![Magento](https://camo.githubusercontent.com/74f990c6f6a950cfc7707cb6d3cfdc731382be6260dfab995f14da50230e9117/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d6167656e746f2d322e342d6f72616e6765)](https://camo.githubusercontent.com/74f990c6f6a950cfc7707cb6d3cfdc731382be6260dfab995f14da50230e9117/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d6167656e746f2d322e342d6f72616e6765) [![PHP](https://camo.githubusercontent.com/49c1441e4607accdb38fb505c51c881b13dabea9a2726b234d7ad218befce9fb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d382e332d2d382e352d626c7565)](https://camo.githubusercontent.com/49c1441e4607accdb38fb505c51c881b13dabea9a2726b234d7ad218befce9fb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d382e332d2d382e352d626c7565) [![Version](https://camo.githubusercontent.com/6a24c9197bfc07f07d3f136dc182a76b14d3cd2f8d473fbc3729540c9a4c5410/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f76657273696f6e2d302e302e312d6c6967687467726579)](https://camo.githubusercontent.com/6a24c9197bfc07f07d3f136dc182a76b14d3cd2f8d473fbc3729540c9a4c5410/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f76657273696f6e2d302e302e312d6c6967687467726579) A thin Microsoft Entra ID provider plugin for the provider-agnostic `admin-sso` capability. It supplies the Entra OIDC preset — discovery from your tenant, scopes, `groups` claim, login-button branding — while all OIDC protocol lives in `sso-core` and all admin logic in `admin-sso`. Installing it pulls `admin-sso` and `sso-core` automatically. Installation ------------ [](#installation) ``` composer require magedevgroup/module-admin-sso-azure bin/magento module:enable MageDevGroup_SsoCore MageDevGroup_AdminSso MageDevGroup_AdminSsoAzure bin/magento setup:upgrade ``` Register the Entra app ---------------------- [](#register-the-entra-app) In the [Azure portal](https://portal.azure.com) → **Microsoft Entra ID → App registrations → New registration**: 1. **Supported account types** — **Accounts in this organizational directory only**(single tenant). Multi-tenant admin login is not supported (see Tenant below). 2. **Redirect URI** — platform **Web**, value = the `admin-sso` callback: `https:////adminsso/sso/callback`(`` is the backend frontName, default `admin`). It must match the admin URL used at runtime exactly. 3. Register, then copy the **Application (client) ID** and the **Directory (tenant) ID**. 4. **Certificates & secrets → New client secret** — copy the secret **value**. 5. **Groups claim** — for IdP-group → ACL-role mapping, **Token configuration → Add groups claim**, and emit it on the **ID** token. Without this Entra sends no groups and role mapping falls back to the default role. Configuration ------------- [](#configuration) Admin → Stores → Configuration → **MageDevGroup → Admin SSO**. **General** (`magedevgroup_admin_sso/general/*`): FieldValueEnable Admin SSOYesIdentity ProviderMicrosoft Entra IDClient IDApplication (client) ID from the Entra appClient Secretclient secret value from the Entra app**Microsoft Entra ID** (`magedevgroup_admin_sso/azure/*`, shown when Entra is selected): FieldValueTenantDirectory (tenant) GUID or a verified domain of your directory (single-tenant only)The discovery URL is derived from the tenant: `https://login.microsoftonline.com//v2.0/.well-known/openid-configuration`. Admin SSO is single-tenant only — the multi-tenant meta values `common`/`organizations`advertise a templated `{tenantid}` issuer that never matches a real token, so they are rejected. Group → role mapping and enforce-SSO/break-glass are configured in `admin-sso`; see that module's README. ### Group overage limitation [](#group-overage-limitation) Entra omits the `groups` claim when a user belongs to more than ~200 groups, sending a `_claim_names`/`_claim_sources` overage reference to Microsoft Graph instead. v1 reads the `groups` claim directly, so such users get no group-based roles and fall back to the default role. A Graph fallback is a future task. Keep affected admins under the overage limit, or scope the groups claim (Token configuration) to the groups assigned to the application. Requirements ------------ [](#requirements) - Magento **2.4.x** - PHP **8.3 – 8.5** Part of the MageDevGroup identity suite --------------------------------------- [](#part-of-the-magedevgroup-identity-suite) RepoRole`sso-core`Shared OIDC engine (installed automatically)`admin-sso` · `admin-sso-`Admin-panel SSO login`customer-sso` · `customer-sso-`Storefront SSO login`admin-scim` · `admin-scim-`Admin-user provisioning (SCIM 2.0)License ------- [](#license) [OSL-3.0](LICENSE) © MageDevGroup. Commercial licensing and support: . ### Health Score 36 — LowBetter than 79% of packages Maintenance90 Actively maintained with recent releases Popularity0 Limited adoption so far Community6 Small or concentrated contributor base Maturity41 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Unknown Total 1 Last Release 47d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/6d5acdc656153eb172422ac03f4a59806116de32da5f861c4b00e4ac7bb9c544?d=identicon)[magedevgroup](/maintainers/magedevgroup) --- Top Contributors [![mageown](https://avatars.githubusercontent.com/u/2058487?v=4)](https://github.com/mageown "mageown (1 commits)") ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/magedevgroup-module-admin-sso-azure/health.svg) ``` [![Health](https://phpackages.com/badges/magedevgroup-module-admin-sso-azure/health.svg)](https://phpackages.com/packages/magedevgroup-module-admin-sso-azure) ``` ### Alternatives [fastly/magento2 Fastly CDN Module for Magento 2.4.x 1564.5M1](/packages/fastly-magento2)[checkoutcom/magento2 Checkout.com Payment Gateway for Magento 2 34280.5k3](/packages/checkoutcom-magento2)[myparcelnl/magento A Magento 2 module that creates MyParcel labels 1861.2k](/packages/myparcelnl-magento)[hryvinskyi/magento2-invisible-captcha Magento 2 multi-provider invisible captcha & bot protection (Google reCAPTCHA v2/v3/Enterprise and Cloudflare Turnstile) for form-level and route-level protection 299.6k](/packages/hryvinskyi-magento2-invisible-captcha)[mage-os/module-automatic-translation Automatic AI content translation for Mage-OS. 3223.7k](/packages/mage-os-module-automatic-translation)[loki/magento2-components Core module for defining Alpine.js components with advanced AJAX features 1015.1k29](/packages/loki-magento2-components) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)