[entraid] store entra appId in plugin settings (#48754)

* [entraid] store entra `appId` in plugin settings This PR stores the Entra ID appID of the application used for SSO in Entra ID plugin settings. This field filled in a best effort scenario and might be empty for old Entra Plugins. Newly created plugins will make the field mandatory. Signed-off-by: Tiago Silva <[email protected]> * handle code review comments --------- Signed-off-by: Tiago Silva <[email protected]>
gravitational · Nov 12, 2024 · 0ebaf18 · 0ebaf18
1 parent c640d4d
commit 0ebaf18
Show file tree

Hide file tree

Showing 5 changed files with 441 additions and 366 deletions.
diff --git a/api/proto/teleport/legacy/types/types.proto b/api/proto/teleport/legacy/types/types.proto
@@ -6498,6 +6498,11 @@ message PluginEntraIDSyncSettings {
   // This field is populated on a best-effort basis for legacy plugins but mandatory for plugins created after its introduction.
   // For existing plugins, it is filled in using the Entra integration when utilized.
   string tenant_id = 4;
+
+  // entra_app_id refers to the Entra Application ID that supports the SSO for "sso_connector_id".
+  // This field is populated on a best-effort basis for legacy plugins but mandatory for plugins created after its introduction.
+  // For existing plugins, it is filled in using the entity descriptor url when utilized.
+  string entra_app_id = 5;
 }
 
 // EntraIDCredentialsSource defines the credentials source for Entra ID.