# Microsoft Entra (Azure AD) Configuration
# Copy this file to .env and fill in your actual values

# Azure AD Tenant ID (Directory ID)
AZURE_TENANT_ID=

# Azure AD Client ID (Application ID)
AZURE_CLIENT_ID=

# Azure AD Client Secret
AZURE_CLIENT_SECRET=

# Azure AD Authority URL (usually https://login.microsoftonline.com/{tenant_id})
AZURE_AUTHORITY=

# Redirect URI (must match what's configured in Azure AD app registration)
AZURE_REDIRECT_URI=http://localhost:5000/auth/callback

# Scopes to request (openid, profile, email are common)
AZURE_SCOPES=openid profile email

# Flask Configuration
SECRET_KEY=your-secret-key-here-change-this-in-production