SSO Reference <!-- TODO: finish this -->
=============

Azure US Government
-------------------

For Azure US Government tenants, use **Azure cloud: US Government** when adding a tenant in the SSO UI.
This sets `azure_environment: 'us_government'` so login and Graph use:

- **Login:** `https://login.microsoftonline.us/` (instead of login.microsoftonline.com)
- **Graph:** `https://graph.microsoft.us` (instead of graph.microsoft.com)


User Metadata
-------------

user_meta($user_id, "AAD_tenants") = {
    '<object_id>': {
        'client_id':        '<client_id>',
        'tenant_id':        '<tenant_id>', 
        'object_id':        '<object_id>', <!-- object_id is AAD's unique identifier for a user -->
    },
    '<object_id>': {
        'client_id':        '<client_id>',
        'tenant_id':        '<tenant_id>', 
        'object_id':        '<object_id>',
    },
}

