Skip to content

feat(integrations): Entra ID integrations#1579

Merged
topher-lo merged 5 commits intomainfrom
feat/entra-id
Oct 28, 2025
Merged

feat(integrations): Entra ID integrations#1579
topher-lo merged 5 commits intomainfrom
feat/entra-id

Conversation

@topher-lo
Copy link
Copy Markdown
Contributor

@topher-lo topher-lo commented Oct 28, 2025

Summary by cubic

Add Microsoft Entra ID integrations with new user and group management tools built on Microsoft Graph v1.0. Also update “Get user ID by email” to use v1.0 and search both mail and userPrincipalName.

  • New Features

    • Added OAuth providers for Entra ID: delegated (AC) and application (CC).
    • Added templates for users and groups: create, get, list, update, delete, and add/remove group members, with OData query support and paging headers.
    • All tools accept base_url and api_version inputs; default to graph.microsoft.com and v1.0.
  • Migration

    • Secret rename: MICROSOFT_ENTRA_AC_TOKEN -> MICROSOFT_ENTRA_USER_TOKEN. Client credentials use MICROSOFT_ENTRA_SERVICE_TOKEN.
    • If you still need /beta endpoints, set api_version to "beta" in tool inputs.

@topher-lo topher-lo added the integrations Pre-built actions label Oct 28, 2025
@blacksmith-sh
Copy link
Copy Markdown
Contributor

blacksmith-sh bot commented Oct 28, 2025

✅ All jobs passed

Summary: 3 successful workflows

Last updated: 2025-10-28 02:31:28 UTC

Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 issues found across 16 files

Prompt for AI agents (all 2 issues)

Understand the root cause of the following 2 issues and fix them.


<file name="packages/tracecat-registry/tracecat_registry/templates/tools/microsoft_entra/users/list_users.yml">

<violation number="1" location="packages/tracecat-registry/tracecat_registry/templates/tools/microsoft_entra/users/list_users.yml:115">
When $count=true is requested, Microsoft Graph requires the ConsistencyLevel header, but this line only adds it for $search or manual consistency toggles. Please include the count flag in this condition so $count calls don&#39;t fail.</violation>
</file>

<file name="packages/tracecat-registry/tracecat_registry/integrations/microsoft_entra.py">

<violation number="1" location="packages/tracecat-registry/tracecat_registry/integrations/microsoft_entra.py:42">
The user-provided email is inserted into the OData filter without escaping embedded quotes, so addresses like o&#39;brien@example.com generate invalid queries and the Graph request fails. Escape single quotes by doubling them before interpolating.</violation>
</file>

React with 👍 or 👎 to teach cubic. Mention @cubic-dev-ai to give feedback, ask questions, or re-run the review.

topher-lo and others added 4 commits October 27, 2025 22:08
…osoft_entra.py

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Signed-off-by: Chris Lo <46541035+topher-lo@users.noreply.github.com>
…icrosoft_entra/users/list_users.yml

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Signed-off-by: Chris Lo <46541035+topher-lo@users.noreply.github.com>
….script.run_python and change args to inputs
@topher-lo topher-lo merged commit 341219c into main Oct 28, 2025
15 checks passed
@topher-lo topher-lo deleted the feat/entra-id branch October 28, 2025 13:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

integrations Pre-built actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants