Azure AD support and multi-tenant?

[stuartbritt]

Hi,

I'm wondering if anyone could tell me whether what I'm looking for is actually possible with Lucia (with Sveltekit) before I spend many hours getting my head round it?

I'm in the early stages of a project that aims to be multi-tenant, and being able to integrate with multiple existing Microsoft 365 tenants (Azure AD) is a must-have requirement. I'm sure it will take me a while to build out the auth side, but I don't want to start out down a route that's a dead end, if I can avoid it.

So, I have 2 main questions:

1. Can Lucia authenticate users against Azure AD using OAuth? (and has anyone actually shown this to work?)
2. My app will identify the tenant a user is coming from by the hostname they are hitting (e.g. tenant1.myapp.com or tenant2.myapp.com). Is it possible for Lucia to dynamically initialize the OAuth handler using the clientId/secret values for each tenant (stored in a database)? The desired result is that users will be authenticated against a different Azure AD tenant depending on the hostname in the URL.

Thanks in advance for any insight provided!

[pilcrowonpaper]

If it uses the standard OAuth 2.0 implementation, it should be fairly easy to implement it to Lucia. We're planning to add better APIs for building custom OAuth providers, but it's going to take a while. Microsoft/Azure provider is also planned to be added some time in the future.

For the second question, as far as I understand your question, yes!