Microsoft OAuth Setup

Use this guide when an SME, Educational Institute, or ISP uses Microsoft Entra ID and wants WispHive to host the login entry URL.

Provider field mapping

Field	Microsoft Entra value
provider_name	microsoft-entra
oauth_authorize_url	https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize
oauth_token_url	https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token
oauth_jwks_url	https://login.microsoftonline.com/{tenant}/discovery/v2.0/keys
oauth_client_id	Application (client) ID
oauth_client_secret	Client secret value
oauth_scope	openid profile email or provider-specific scopes

Example request

{
  "registration_id": "isp_1ab23cd45ef6",
  "entity_name": "MetroFiber ISP",
  "provider_name": "microsoft-entra",
  "oauth_authorize_url": "https://login.microsoftonline.com/11111111-2222-3333-4444-555555555555/oauth2/v2.0/authorize",
  "oauth_token_url": "https://login.microsoftonline.com/11111111-2222-3333-4444-555555555555/oauth2/v2.0/token",
  "oauth_jwks_url": "https://login.microsoftonline.com/11111111-2222-3333-4444-555555555555/discovery/v2.0/keys",
  "oauth_client_id": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
  "oauth_client_secret": "replace-with-real-secret"
}

Entra configuration

1. Create or open an App Registration.
2. Add the returned callback_url as a Web redirect URI.
3. Use the returned hosted_login_url in your captive portal.
4. Keep the app registration and the tenant in the submitted URLs aligned.