# Microsoft Entra (Azure AD) Configuration
# Get these values from your Azure AD app registration in the Azure portal

# Azure AD Tenant ID (Directory ID)
AZURE_TENANT_ID=98367e69-bd4c-47c6-90ef-683461397b64

# Azure AD Client ID (Application ID)
AZURE_CLIENT_ID=5b2137d0-b143-4f1a-85b0-d740d62faebc

# Azure AD Client Secret
AZURE_CLIENT_SECRET=Ql88Q~1wo-_L8vg-csgL4GFhLR_A8klPvphHUcyx

# Azure AD Authority URL (usually https://login.microsoftonline.com/{tenant_id})
AZURE_AUTHORITY=https://login.microsoftonline.com/98367e69-bd4c-47c6-90ef-683461397b64

# Redirect URI (must match what's configured in Azure AD app registration)
# For local development, use: http://localhost:8080/auth/callback
AZURE_REDIRECT_URI=http://localhost:5000/auth/callback

# Scopes to request (openid, profile, email are common)
AZURE_SCOPES=openid profile email

# Flask Configuration
SECRET_KEY=your-secret-key-here-change-this-in-production