Using Azure Active Directory OAuth 2.0

[senses0]

Hi,

I wanted to try this plugin to connect to Intune Data Warehouse which uses Odata 4.0. https://learn.microsoft.com/en-us/mem/intune/developer/reports-nav-intune-data-warehouse

Intune Data Warehouse uses OAuth 2.0 for authentication and authorization, which means a token should be acquired (from a different login endpoint) before making the actual OData API call.

I was wondering if this is possible with the current release of the plugin and if not, is this something planned for future versions of the plugin?

Thanks

[carroe]

Hi,

we haven't used the plugin in the context of Intune Data Warehouse yet and we lack experience with it.

• Which OAuth2 grant type do you need?
• Are you logged into your Grafana instance via Azure AD and can use 'Forward OAuth identity' (see data source configuration)?
• Can you create the access token elsewhere and then configure an 'Authorization' header in the data source configuration having 'Bearer {access token}' as the value?

Best regards,
Carsten

[KevinHunter12]

Could oAuth 2 be added ?
I tried with Foward OAuth but it didn’t work but adding the header did, however the problem is that the token has a short expiration time and I have to keep changing it.
I use client credentials (client Id and secret)
Thanks

[jerryguowei]

@carroe The Forward OAuth identity doesn't work. I am using grafana generic-oauth to add keycloak as the provider. But the Odata plugin doesn't forward oauth token to the backend..

I can confirm the generic-oauth is config correctly because I am able to use the Forward OAuth identity for other datasources. E.g. Elasticsearch.

[carroe]

@jerryguowei @KevinHunter12

Ok, I'll have a look at that.

I had already created a branch with a test setup with keycloak some time ago.

https://github.com/d-velop/grafana-odata-datasource/tree/feature-oauth-integration