Basically, the title says it all.

More & more students at our school are asking for a way to authenticate through our Microsoft environment for their own school projects/web applications.

So, we are willing to listen to that and build an universal login system. We need a system (preferably with an App registration in the Azure portal) that allows logins to Microsoft on our organization. Then, after logging in, we want it to redirect to any students site (on the same domain) and authenticate to that.

Important to note, most of the students use PHP for their web applications. The use of the Graph API is not required, but would be cool.

So, is there any possibility for that? If so, how would we do that?

CodePudding user response：

To achieve the above requirement You will need to modify your PHP web application code to redirect to your any students site post authentication with Azure AD.

Thus to authenticate with Azure AD you will need to include the Azure AD Authentication assembly in your pHp website code . For example you can refer this

Further you will need to add redirection uri for the student websites in the php webapplication code itself and ensure that the student websites are hosted as subdomain website for the php web application itself.

For more information please refer this MICROSOFT DOCUMENTATION:- Integrating with the Microsoft identity platform