OIDC and MS Graph

I use the OIDC module for authentication with Azure in my app and also the MS Graph connector to allow access to mail and calendars. Both of these work fine, but involve a 2 step process for users to give permission. The initial login asks for permission to access the profile for OIDC, but then they have to click another button to give permission for MS Graph. I would like to let users grant permissions once on initial login and have this cover both cases. However the modules have different domain models with different authentication entities, so I'm not sure how to manage this. The OIDC module has a Token object, whereas every call in the MS Graph module checks for a MS Graph Authorization object, and this will only exist if the second authentication has been performed Is there a simple way of doing this?
1 answers



This is what you need to set for the MsGraph app registration in your Azure tenant.