Add Entra Login via Federated Credentials

[sprayzcs]

Describe the solution you'd like

The Oauth2 Login with Entra ID should work with federated credentials, so that you dont need to create a client secret anymore when hosting pgAdmin in azure services.

Describe alternatives you've considered

/

Additional context

https://learn.microsoft.com/en-us/graph/api/resources/federatedidentitycredentials-overview?view=graph-rest-1.0
https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview?tabs=dotnet

[Pyodin]

Hi everyone!
I’m using pgAdmin4 on AKS with Azure Workload Identity and Entra ID.
I’d like to contribute support for Entra login using federated credentials (OIDC) to avoid having an oauth2-proxy sidecar.

Before starting, I’d love to align on:

• expected auth flow
• whether this should be generic OIDC or Azure-specific
• preferred scope for a first PR

Happy to start small and iterate.

[khushboovashi]

Hi @Pyodin,

You can use the current OAuth 2.0 authentication workflow as a base and work upon it.
It would be great if you could consider the generic OIDC.
To begin, start with the user login flow.

Thanks,
Khushboo

[yogeshmahajan-1903]

#9525