❔ Microsoft SSO is id_token secure, and can i use preferred Username as email?
So i have been struggling alot with integrating Azure AD SSO. First i tried using the middleware but that conflicted with the existing username/password bearer setup. Then i tried finding a way to validate the token, but failed to validate the full token. Now i can validate the id_token that is sent to, but i am not sure if i can trust the preferred_username to always be an email, and never change?
1 Reply
Looks like nothing has happened here. I will mark this as stale and this post will be archived until there is new activity.