Proposed fix for users being sidelined to a dead-end blank page "/api/auth/ext" during authentication (esp. with Google Chrome)

[XKa-MSF-OCB]

osTicket plugin "OpenID Authentication for Microsoft" (plugin ID: "auth:openid-MS") v0.2_XKa-MSF-OCB_2021.09.22.0, patched from original v0.2

Proposed fix for reoccurring problem with users being sidelined to a dead-end blank page "/api/auth/ext" on the osTicket server during authentication (osTicket PHP code being installed in the root of the web server or in a sub-directory), especially affecting Google Chrome (Mozilla Firefox seems more resilient to this problem)

See related osTicket forum posts, such as:

• https://forum.osticket.com/d/92134-openid-authentication-for-microsoft-in-osticket
• https://forum.osticket.com/d/99564-osticket-login-not-working-with-microsoft-edge-or-google-chrome
• https://forum.osticket.com/d/99864-osticket-115-sign-in-doesnt-work-with-edge-or-chrome-but-firefox-does

NOTE:
This fix has already been tested and validated in our production environment for more than a month now, our users have not reported this problem anymore since - so we wanted to give our little contribution to the osTicket open-source community with this amended plugin (both PHP source and packaged PHAR file)...
Hope this may help other people encountering similar problems.
Should you have any problem, question, objection, remark, suggestion, etc. , any (constructive) feedback is welcome... :)

[tyaoning]

Hello, I am able to configure the plugin, and go through the windows login. However after login, microsoft said I couldn't sign in
https://forum.osticket.com/assets/files/2021-11-22/1637610921-791350-image.png
I don't know what's the reason, when I checked OSticket with local login, I found when I enabled this plugin, this authentication method is not listed in Authentication Backend list, maybe that prevent MS authentication.

Can anybody give me some helps?
Thanks

[XKa-MSF-OCB]

Hello, I am able to configure the plugin, and go through the windows login. However after login, microsoft said I couldn't sign in https://forum.osticket.com/assets/files/2021-11-22/1637610921-791350-image.png I don't know what's the reason, when I checked OSticket with local login, I found when I enabled this plugin, this authentication method is not listed in Authentication Backend list, maybe that prevent MS authentication.

Can anybody give me some helps? Thanks

---

Hello @tyaoning
Would you mind to provide additional details?
Especially about any specific configuration of your environment, and about any error message you get (preferably by selecting their text and copying/pasting it as is, make sure to obfuscate any sensitive data such as secrets/password).
Have you already carefully cross-checked with your IT infrastructure support team all configuration parameters for this plugin as per https://github.com/cbasolutions/osTicket-Plugins/tree/master/auth-openid-MS, especially the ones that are mandatory (with red asterisk)?
Reference as https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-protocols might be helpful in identifying the problem.
Thank you

[tyaoning]

The issue is fixed, the plugins works great with osTicket V1.15.4. The issue I had before was caused be misconfiguration in Azure. When I set Enterprise Application properties "Assignment required" to "No". I can sign with my office365 account properly.

Thanks for the great Plugin.