[
https://issues.apache.org/jira/browse/NIFI-12037?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Justin updated NIFI-12037:
--------------------------
Description:
When configuring the AzureGraphUserGroupProvider for clouds other than the
Azure global service cloud
([https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-national-cloud)]
all of the necessary endpoints are not updated so the graph endpoint stays as
graph.microsoft.com instead of using the associated endpoint for the regional
clouds. To keep implementation simple the graph endpoint and scope in
"ClientCredentialAuthProvider.java" and "AzureGraphUserGroupProvider.java" from
the nifi-azure-bundle can be exposed to the configuration file, keeping the
current defaults, but allowing them to be changed when necessary.
PR: https://github.com/apache/nifi/pull/7675
was:When configuring the AzureGraphUserGroupProvider for clouds other than
the Azure global service cloud
([https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-national-cloud)]
all of the necessary endpoints are not updated so the graph endpoint stays as
graph.microsoft.com instead of using the associated endpoint for the regional
clouds. To keep implementation simple the graph endpoint and scope in
"ClientCredentialAuthProvider.java" and "AzureGraphUserGroupProvider.java" from
the nifi-azure-bundle can be exposed to the configuration file, keeping the
current defaults, but allowing them to be changed when necessary.
> AzureGraphUserGroupProvider does not work with regional Azure instances
> -----------------------------------------------------------------------
>
> Key: NIFI-12037
> URL: https://issues.apache.org/jira/browse/NIFI-12037
> Project: Apache NiFi
> Issue Type: Bug
> Reporter: Justin
> Priority: Blocker
> Labels: authorization, azure
>
> When configuring the AzureGraphUserGroupProvider for clouds other than the
> Azure global service cloud
> ([https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-national-cloud)]
> all of the necessary endpoints are not updated so the graph endpoint stays
> as graph.microsoft.com instead of using the associated endpoint for the
> regional clouds. To keep implementation simple the graph endpoint and scope
> in "ClientCredentialAuthProvider.java" and "AzureGraphUserGroupProvider.java"
> from the nifi-azure-bundle can be exposed to the configuration file, keeping
> the current defaults, but allowing them to be changed when necessary.
> PR: https://github.com/apache/nifi/pull/7675
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
