Authenticating with Azure Entra SSO using the REST API

Assuming Entra ID is configured the same way as M-Files then you typically would want to go down the OAuth route.  You would show a login prompt from the IDP (Entra ID), obtain an access token, then provide that to the REST API via the standard "Authorization" header.

Thanks for this Craig,

I'll give it a go and see where I end up from there.

Hi Craig,

I made some progress, 

Using MSAL I'm now getting a token from Entra, which I can pass to M-files.
I think I need to make M-files accept tokens from this source, although I could be wrong about that.
If that is the case, are you aware/can you point me to some documentation on how I can accomplish this?

Can you log into M-Files using Entra ID?

Using the full client?

Using the classic web is the best test, but any client. 

If you can log in using any client then in general M-Files is configured for oauth, but the token you've got isn't being accepted.

If so then there's a way in the auth config to enable logging which will output details on why the token fails to be accepted by the server.

This isn't my area of expertise, but that logging has, in the past, helped me work out what was needed to be altered (e.g. an additional scope) to ensure the token was accepted. 

Using the classic web is the best test, but any client. 

If you can log in using any client then in general M-Files is configured for oauth, but the token you've got isn't being accepted.

If so then there's a way in the auth config to enable logging which will output details on why the token fails to be accepted by the server.

This isn't my area of expertise, but that logging has, in the past, helped me work out what was needed to be altered (e.g. an additional scope) to ensure the token was accepted.