add support for microsoft entra id

Author: msukkari

docs/self-hosting/configuration/authentication.mdx

@@ -101,6 +101,15 @@ Optional environment variables:
 - `AUTH_EE_KEYCLOAK_CLIENT_SECRET`
 - `AUTH_EE_KEYCLOAK_ISSUER`
 
+### Microsoft Entra ID
+
+[Auth.js Microsoft Entra ID Provider Docs](https://authjs.dev/getting-started/providers/microsoft-entra-id)
+
+**Required environment variables:**
+- `AUTH_EE_MICROSOFT_ENTRA_ID_CLIENT_ID`
+- `AUTH_EE_MICROSOFT_ENTRA_ID_CLIENT_SECRET`
+- `AUTH_EE_MICROSOFT_ENTRA_ID_ISSUER`
+
 ---
 
 # Troubleshooting

docs/self-hosting/license-key.mdx

@@ -19,4 +19,4 @@ docker run \
 
 ## Questions?
 
-If you have any questions regarding licensing, please [contact us](mailto:team@sourcebot.dev).
+If you have any questions regarding licensing, please [contact us](https://www.sourcebot.dev/contact).

packages/web/src/ee/sso/sso.tsx

@@ -5,6 +5,7 @@ import Google from "next-auth/providers/google";
 import Okta from "next-auth/providers/okta";
 import Keycloak from "next-auth/providers/keycloak";
 import Gitlab from "next-auth/providers/gitlab";
+import MicrosoftEntraID from "next-auth/providers/microsoft-entra-id";
 import { prisma } from "@/prisma";
 import { notFound, ServiceError } from "@/lib/serviceError";
 import { OrgRole } from "@sourcebot/db";
@@ -77,6 +78,14 @@ export const getSSOProviders = (): Provider[] => {
         }));
     }
 
+    if (env.AUTH_EE_MICROSOFT_ENTRA_ID_CLIENT_ID && env.AUTH_EE_MICROSOFT_ENTRA_ID_CLIENT_SECRET && env.AUTH_EE_MICROSOFT_ENTRA_ID_ISSUER) {
+        providers.push(MicrosoftEntraID({
+            clientId: env.AUTH_EE_MICROSOFT_ENTRA_ID_CLIENT_ID,
+            clientSecret: env.AUTH_EE_MICROSOFT_ENTRA_ID_CLIENT_SECRET,
+            issuer: env.AUTH_EE_MICROSOFT_ENTRA_ID_ISSUER,
+        }));
+    }
+
     return providers;
 }
 

packages/web/src/env.mjs

@@ -40,6 +40,9 @@ export const env = createEnv({
         AUTH_EE_KEYCLOAK_CLIENT_ID: z.string().optional(),
         AUTH_EE_KEYCLOAK_CLIENT_SECRET: z.string().optional(),
         AUTH_EE_KEYCLOAK_ISSUER: z.string().optional(),
+        AUTH_EE_MICROSOFT_ENTRA_ID_CLIENT_ID: z.string().optional(),
+        AUTH_EE_MICROSOFT_ENTRA_ID_CLIENT_SECRET: z.string().optional(),
+        AUTH_EE_MICROSOFT_ENTRA_ID_ISSUER: z.string().optional(),
 
         DATA_CACHE_DIR: z.string(),