Support Azure Active Directory SSO + MFA Integration for Signoz Community Edition

[Kyohei7]

Summary

I would like to request support for Azure Active Directory (Azure AD) authentication in SigNoz Community Edition (CE), ideally via OpenID Connect (OIDC). Azure AD already enforces MFA by default, so by enabling SSO login, SigNoz CE would indirectly support MFA as well.

Why this feature is important

• Many small to mid-size teams (including self-hosted users of SigNoz CE) use Microsoft 365 / Azure AD as their default identity provider.
• Even outside enterprise environments, users often need a secure and centralized login mechanism.
• Managing local users manually in SigNoz CE can be difficult as teams grow.
• Having optional Azure AD login support would improve usability, reduce admin overhead, and increase adoption among teams that rely on Microsoft accounts.

Clarification

I understand that SigNoz Enterprise provides advanced authentication features.
This request is specifically for basic OIDC login support in Community Edition, without advanced enterprise capabilities such as:

• RBAC based on groups
• fine-grained permissions
• audit logging
• advanced multi-tenant controls

The objective is to enable simple sign-in with Azure AD for small teams, while still allowing the enterprise version to keep its advanced access-control features.

Suggested Implementation

• Add basic OIDC login support for CE:
  • Authorization Code Flow with PKCE
  • Configurable callback URL
  • Simple claim mapping (email → user)
• Allow login using Azure AD user identity; MFA is handled directly by Azure AD.

Alternatives Considered

• Using oauth2-proxy in front of SigNoz CE.
  This works, but does not integrate cleanly with the internal SigNoz user model and can be complex for new users.