Da sia.
OIDCProviderMetadataURL https://login.microsoftonline.com/e787b025-3fc6-4802-874a-9c988768f892/v2.0/.well-known/openid-configuration
OIDCClientID 596aae40-7073-425d-9b5b-2a92ca3a557d
OIDCClientSecret zMc.i~x69.1kmRJ.U2j9Vaw3INS.baCQ-9
# OIDCRedirectURI is a vanity URL that must point to a path protected by this module but must NOT point to any content
OIDCRedirectURI https://appia.unimore.it/azuread/redirect_uri
OIDCCryptoPassphrase nUMeRw3RKmcwdHVWdR2bvQ+S2gbjnKyJNF1tCCaW
OIDCScope "openid email profile"
# Set REMOTE_USER to the email address.
# this is the value that mod_authnz_ldap leverages as the first parameter after basedn.
# in the example below, REMOTE_USER = email = mail attribute in LDAP.
OIDCRemoteUserClaim preferred_username
ShibCompatValidUser On
<Location /azuread>
AuthType openid-connect
Require claim "claims.preferred_username:malvezzi@unimore.it"
require valid-user
</Location>