Authentik 2025.4.0 and Azure AD mappings no longer working

[samip5]

Am I alone in being unable to get enrollment working though Azure AD when using the example expression policy for it?

I'm seeing that we are missing prompt_data entirely and oauth_userinfo doesn't provide really any info either?

https://docs.goauthentik.io/docs/users-sources/sources/social-logins/azure-ad/#automatic-user-enrollment-and-attribute-mapping

[dewi-tik]

I'm in the process of updating the documentation for the Azure AD/Entra ID source.

If you remove the OIDC Well-Known URL and set the Profile URL to https://graph.microsoft.com/v1.0/me. The info object should have more information for you.

Ensure that you're given the appropriate API permissions in Entra ID for the App Registration too.

[samip5]

So Microsoft has changed something?