feat(idp): added custom idp scheme for Entra

internal/node/id_generator.go

@@ -19,12 +19,13 @@ import (
 // All IDP schemes supported by the ID generator.
 // The ID generator creates IDs based on the proof and issuer information.
 const (
-	OktaScheme = "OKTA-"
-	DuoScheme  = "DUO-"
-	OryScheme  = "ORY-"
-	IdpScheme  = "IDP-"
-	PingScheme = "PING-"
-	SelfScheme = "AGNTCY-"
+	OktaScheme  = "OKTA-"
+	DuoScheme   = "DUO-"
+	OryScheme   = "ORY-"
+	IdpScheme   = "IDP-"
+	PingScheme  = "PING-"
+	EntraScheme = "ENTRA-"
+	SelfScheme  = "AGNTCY-"
 )
 
 type IDGenerator interface {
@@ -68,6 +69,8 @@ func (g *idGenerator) GenerateFromProof(
 		scheme = IdpScheme
 	case oidc.PingProviderName:
 		scheme = PingScheme
+	case oidc.EntraProviderName:
+		scheme = EntraScheme
 	case oidc.SelfProviderName:
 		scheme = SelfScheme
 	default:

pkg/oidc/parser.go

@@ -39,6 +39,7 @@ const (
 	OryProviderName
 	IdpProviderName
 	PingProviderName
+	EntraProviderName
 	SelfProviderName
 )
 

pkg/oidc/provider.go

@@ -35,6 +35,8 @@ func (p *parser) detectProviderName(
 		return DuoProviderName, nil
 	case isPing(headers, providerUrl.Host):
 		return PingProviderName, nil
+	case isEntra(headers, providerUrl.Host):
+		return EntraProviderName, nil
 	default:
 		return IdpProviderName, nil
 	}
@@ -62,6 +64,10 @@ func isPing(_ http.Header, host string) bool {
 		strings.HasSuffix(host, "pingone.ca")
 }
 
+func isEntra(_ http.Header, host string) bool {
+	return strings.HasSuffix(host, "microsoftonline.com")
+}
+
 func getProviderMetadata(ctx context.Context, issuer string) (*providerMetadata, error) {
 	metadata, oidcErr := getOidcProviderMetadata(ctx, issuer)
 	if oidcErr == nil {