OAuth 2.0 - Microsoft

[alejandratenorio]

With the current OAuth2 providers, we can only connect to specific providers. We worked with Active Directory and we had to connect with Microsoft.
Similar to ORCID, GOOGLE and GitHub, we integrate Mircrosoft as OAuth2 provider in Dataverse.
The goal of CIMMYT is to contribute with this. We would like to share with you the source code for your review and comments.

[pdurbin]

@alejandratenorio hi! Thanks for your interest in contributing to Dataverse!

I was just clicking around https://data.cimmyt.org and noticed that the Microsoft login makes use of an HTTP Basic Auth pop ("Authentication Required") as in the screenshots below:

Was the HTTP Basic Auth popup a design choice? The other OAuth providers look more like this with the standard OAuth login flow (Google shown below):

Please let us know. Thanks!

Also, I wanted to let you (and others) know that over at http://guides.dataverse.org/en/4.16/installation/shibboleth.html#shibboleth-and-adfs there are some instructions for logging into ADFS/Active Directory through Shibboleth/SAML instead of OAuth. I just mention this so that when it comes time to document the feature we can explain that there are multiple options (SAML and OAuth) for getting login to Microsoft working.

[alejandratenorio]

Hello @pdurbin,

Basic Auth pop was a specific condition for CIMMYT, to limit log-in to email addresses ending in @cgiar.org.

Without the Basic Auth pop look like,

[pdurbin]

@alejandratenorio ok! Sounds great! We discussed this issue during our weekly design meeting and we're ready for a pull request! Please let us know if there's anything you need! I'm happy to help with docs, etc.