Contrib.social

[D7] Consolidate api upgrades from Azure AD to Microsoft Graph

Open on Drupal.org →
Created on 5 June 2025, 3 days ago

Problem/Motivation

From the 1st of Feb 2025 the old windows Azure AD Graph apis are deprecated and will be completely downed by the end of June 2025 as per following documentation by Microsoft
https://techcommunity.microsoft.com/blog/microsoft-entra-blog/action-req...
Resulting in login issues where where the graph API is used to sync the userinformation

As a solution we will have move to new apis from Microsoft to fulfil the requirement, we will have to port from old apis to new apis here is the document of difference of the APIs requests
https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-request-d...

Full document for migration:
https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-audit-api...

Steps to reproduce

  1. Setup the openid connect module
  2. Setup the Azure application for the sso and add correct permissions to it
  3. Enable the openid connect windows aad module
  4. Select the plugin under openid connect module configuration
  5. Add client id, client secret, tenant id, authorize and token url
  6. Ckeck the "Use Graph API for user info" check box and save
  7. save
  8. try to login
  9. you will see and error while login and the login will not be successful

Proposed resolution

Upgrade the graph apis from windows to Microsoft and update the api calls for those graph api through out the module
In this solution we will consider the following issues raised as part of support under Drupal.org

  1. https://www.drupal.org/project/openid_connect_windows_aad/issues/3528534 💬 Upgrade module to use Microsoft Graph Apis instead of old windows apis Active ::

    This is focuses on upgrading the module's apis to new graph api for user login and user's information sync

  2. https://www.drupal.org/project/openid_connect_windows_aad/issues/3175503 → ::

    This is focuses on mapping the Microsoft Group to Drupal user roles

These two issues are interlinked and update same files and almost same lines of code for their respective features, Hence consolidating both the issues under one upgrade patch makes sense and easier for implementation.

API changes

We will update the api calls from Windows Azure Ad graph apis to Microsoft Graph as per following document
https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-request-d...

✨ Feature request
Status

Active

Version

1.0

Component

Code

Created by

🇮🇳India kaustubhb Mumbai

Live updates comments and jobs are added and updated live.
  • API change

    Changes an existing API or subsystem. Not backportable to earlier major versions, unless absolutely required to fix a critical bug.

Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024