Dear Community,
I have successfully configured Microsoft Entra ID as a Brokered Identity Provider following the official IFS guide: https://docs.ifs.com/techdocs/24r2/030_administration/010_security/040_iam_settings/041_external_identity_providers/021_Configuring_Azure/
Everything works fine, but only with our internal website. For external access (Cloudflare+reverse proxy), I added an additional parameter to the ifscloud-values.yaml configuration file, namely secondarySystemUrl. External access works, but only for manual authorization (entering login manually).
For external access, I also want to use Microsoft Entra ID as an identity broker. On the MS Entra side, I added an additional external redirect URI and planned to add an additional identity provider on the application side as well, but unfortunately, the application only generates redirect URIs for the internal site. How can I create IAM Identity Provider with external Redirect URi?
Overall, I'm not sure if this configuration will work, but I'd like to test it. If I'm wrong and it won't work anyway in this configuration, please tell me the correct solution.
Kind regards,
Sergei Valert
Senior Site Reliability Engineer