[NIFI-12037] AzureGraphUserGroupProvider does not work with regional Azure instances

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 2.0.0-M1, 1.24.0
• Labels: authorization azure
• Assignee: Unassigned
• Reporter: Justin
• Created: 11/Sep/23 16:00
• Updated: 14/Sep/23 19:16
• Resolved: 14/Sep/23 17:39

Description

When configuring the AzureGraphUserGroupProvider for clouds other than the Azure global service cloud (https://learn.microsoft.com/en-us/azure/active-directory/develop/authentication-national-cloud) all of the necessary endpoints are not updated so the graph endpoint stays as graph.microsoft.com instead of using the associated endpoint for the regional clouds.  To keep implementation simple the graph endpoint and scope in "ClientCredentialAuthProvider.java" and "AzureGraphUserGroupProvider.java" from the nifi-azure-bundle can be exposed to the configuration file, keeping the current defaults, but allowing them to be changed when necessary.

PR: https://github.com/apache/nifi/pull/7675

Issue Links

• links to: GitHub Pull Request #7675