Installation 

Install with Composer 

Install the extension via Composer:

composer req oliverkroener/ok-azure-login
Copied!

After installation, update the database schema to create the configuration table:

vendor/bin/typo3 database:updateschema
Copied!

See also t3start:installing-extensions.

Include the static TypoScript 

  1. In the TYPO3 backend, go to the Template module
  2. Select the root page of your site
  3. Choose Info/Modify and click Edit the whole template record
  4. Switch to the Includes tab
  5. Add Azure Login from the list of available static templates

Add the content elements 

The extension provides two content elements, available under the Azure Login group in the New Content Element Wizard:

Azure Login
Renders a "Sign in with Microsoft" button. When a user authenticates via Microsoft Entra ID, the extension matches their email to an existing fe_users record and logs them in.
Azure Logout
Renders a "Sign out" button for logged-in users. Can optionally redirect to the Microsoft logout endpoint to sign the user out of Microsoft as well.

To add them:

  1. Go to the Page module and select the page where the login or logout button should appear
  2. Click Create new content element
  3. Select from the Azure Login group: either Azure Login or Azure Logout
  4. Configure the element settings (button theme, redirect URL, etc.)
  5. Save and clear caches

Backend login 

The extension automatically registers a backend login provider. Once configured (see Configuration), one or more "Sign in with Microsoft" buttons appear as a separate tab on the TYPO3 backend login screen at /typo3/.

To set up backend login:

  1. Go to Web > Azure Login and switch to the Backend tab
  2. Click Add Backend Login Configuration
  3. Fill in the Azure credentials (Tenant ID, Client ID, Client Secret, Label)
  4. Copy the auto-generated Redirect URI and register it in your Azure app
  5. Save the configuration

The backend redirect URI (/typo3/azure-login/callback) is automatically derived from the TYPO3 route configuration. You can create multiple backend login configurations for different Azure tenants.