# Microsoft Office 365/Azure AD Authentication

**URL:** https://forums.concretecms.org/t/microsoft-office-365-azure-ad-authentication/4959
**Category:** Developing with Concrete
**Created:** [February 2, 2023, 9:38am UTC](https://forums.concretecms.org/t/microsoft-office-365-azure-ad-authentication/4959 "2023-02-02T09:38:43Z")
**Posts on this page:** 1
**Showing post:** 7

<div class="post-metadata">

### Author: ![ajdi](https://forums.concretecms.org/user_avatar/forums.concretecms.org/ajdi/32/6229_2.png) [@ajdi](https://forums.concretecms.org/u/ajdi)
#### Post date: [July 12, 2023, 3:09pm UTC](https://forums.concretecms.org/t/microsoft-office-365-azure-ad-authentication/4959/7 "2023-07-12T15:09:01Z")

</div>

We had a very similar run of issues when I tried setting up our site using the same plugin. That said, glad to report that it works beautifully - thanks @Lemonbrain!

So, @kspitzley - what we had to do was look at the Azure config.

Open Azure \> App Registrations \> _your app_ \> Manifest, then check the following properties…

```auto
	"oauth2AllowIdTokenImplicitFlow": true,
	"oauth2AllowImplicitFlow": true,

```

Additionally, we added OptionalClaims too, which you can do from the UI or add them as per below…

```auto
	"optionalClaims": {
		"idToken": [
			{
				"name": "email",
				"source": null,
				"essential": false,
				"additionalProperties": []
			},
			{
				"name": "family_name",
				"source": null,
				"essential": false,
				"additionalProperties": []
			},
			{
				"name": "given_name",
				"source": null,
				"essential": false,
				"additionalProperties": []
			},
			{
				"name": "preferred_username",
				"source": null,
				"essential": false,
				"additionalProperties": []
			}
		],
		"accessToken": [],
		"saml2Token": []
	},

```

With that, we’ve successfully got authentication working.

One thing I’d love to know, and more a question for @Lemonbrain - is there a way we can use the users access tokens to perform additional API requests (ie, to show their full name or department) once logged in?

---

_[View the full topic](https://forums.concretecms.org/t/microsoft-office-365-azure-ad-authentication/4959)._