'Argo Workflow SSO not working with Azure Active Directory B2C
We are trying to integrate Argo Workflow SSO with Azure Active Directory B2C. But it is not working. Though We are able to integrate this with Keycloak perfectly.
With Keycloak our argo-workflow configmap (workflow-controller-configmap) looks like below, which is working perfectly fine.
kubectl get cm workflow-controller-configmap -n argo -o yaml
apiVersion: v1
kind: ConfigMap
data:
...
sso: |
issuer: https://<keycloak-base-url>/auth/realms/<realm-name>
clientId:
name: argo-sso
key: clientID
clientSecret:
name: argo-sso
key: clientSecret
redirectUrl: https://<argo-base-url>/oauth2/callback
But if I try to modify same with Azure Active Directory B2C url like below, it is not working:
sso: |
issuer: https://<b2c-domain>.b2clogin.com/<azure-ad-b2c-tenant-id>/v2.0/
clientId:
name: argo-sso
key: clientID
clientSecret:
name: argo-sso
key: clientSecret
redirectUrl: https://<argo-base-url>/oauth2/callback
We are following below documentation as reference (search for SSO): https://argoproj.github.io/argo-workflows/workflow-controller-configmap.yaml
We also checked with Microsoft Team & Azure B2C side we are able to run sample userflows (https://jwt.ms/) & verify authentication token also. So our understanding is Azure B2C configuration looks good, but somehow "Argo Workflow Integration with Azure B2C" not working.
Can anyone please help, it is a blocker for us.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
Solution | Source |
---|