It seems likely that the issue you're experiencing with Phoenix on Azure after enabling SSO via Azure Entra ID could be related to the configuration of the OAuth2 identity provider. My understanding is that Phoenix supports login via third-party identity providers, including Microsoft Entra ID, using the OAuth2 authorization code flow. This requires setting specific environment variables such as `PHOENIX_OAUTH2_MICROSOFT_ENTRA_ID_CLIENT_ID`, `PHOENIX_OAUTH2_MICROSOFT_ENTRA_ID_CLIENT_SECRET`, and `PHOENIX_OAUTH2_MICROSOFT_ENTRA_ID_OIDC_CONFIG_URL` (<https://docs.arize.com/phoenix/deployment/authentication#%3ARckd9uucqfkvfa%3A|source>).
To debug the issue, you might want to verify that these environment variables are correctly set and that the redirect URIs are properly configured in your Azure portal. Additionally, ensure that the well-known configuration endpoint is accessible and correctly set up. If the error persists, checking the logs for any specific error messages related to the OAuth2 flow or the AADSTS54005 error could provide more insights. Would you like more detailed steps on how to verify these configurations?
Sources:
- <https://docs.arize.com/phoenix/deployment/authentication#%3ARckd9uucqfkvfa%3A|Phoenix Authentication Setup>
