You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Orchestrator pin bumped to v3.5.1. This brings Microsoft Entra/MSAL sign-in to the optional orchestrator admin dashboard at /dashboard/, with API-scoped token acquisition, fail-closed tenant/client configuration, verified audience validation, and exact Admin app-role enforcement.
Fixed
Admin dashboard authentication is now usable end to end. The dashboard SPA no longer depends on manually injected bearer tokens. It can bootstrap MSAL from /api/dashboard/auth-config, sign in with the configured single App Registration, send bearer tokens to protected dashboard APIs, and show clear 401 reauthentication or 403 missing-role states.
Component versions
Component
Version
gpt-rag-ui
v2.3.13
gpt-rag-orchestrator
v3.5.1
gpt-rag-ingestion
v2.4.14
infra / AI Landing Zone
v2.3.0
Validation
Azure/gpt-rag-orchestrator#260 checks passed before merge.
Azure/gpt-rag-orchestrator v3.5.1 was published successfully.
manifest.json was parsed successfully after the version bump.
Live tenant validation still requires a recreated or selected GPT-RAG validation environment, because the previous dashboard validation resource group is no longer present in the target subscription.
