Auth.azuread in grafana.ini

  • What Grafana version and what operating system are you using?

    • Grafana v11.5.1
  • What are you trying to achieve?
    Configure Azure AD/Entra ID OAuth authentication, if change to auth.google, auth,gitlab, auth.github etc then the SSO option will appear in the login page, only auth.azuread not showing.

  • How are you trying to achieve it?
    Configure in the Grafana Helm chart values.yaml

  • What happened?
    The SSO option does not show in the login page.

  • What did you expect to happen?
    The SSO option of Azure AD should appear

  • Can you copy/paste the configuration(s) that you are having problems with?
    grafana.ini:
    auth.azuread:
    name: Azure AD
    enabled: true
    allow_sign_up: true
    auto_login: false
    client_authentication: client_secret_post
    client_id: “xxxxxx”
    client_secret: “xxxxx”
    allowed_organizations: “xxxxx”
    auth_url: “xxx://login.microsoftonline.com/xxxx/oauth2/v2.0/authorize”
    token_url: “xxx://login.microsoftonline.com/xxxxx/oauth2/v2.0/token”
    scopes: “openid email profile”
    role_attribute_strict: false
    allow_assign_grafana_admin: false
    skip_org_role_sync: false
    use_pkce: true
    role_attribute_path: “contains(roles[], ‘Admin’) && ‘Admin’ || contains(roles[], ‘Editor’) && ‘Editor’ || ‘Viewer’”

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.
    No errors

  • Did you follow any online instructions? If so, what is the URL?
    Configure Azure AD/Entra ID OAuth authentication | Grafana documentation

Why false, when you want to enable it?

Sorry, typo. Although I set as True, it still not showing.

If I configure through the Grafana GUI, then it works. Then, I disabled it and try to configure via helm chart values.yaml.


It just showing not enabled, but when change from auth.azuread to auth.google, auth.gitlab etc, it will show enabled.