Keep secrets server-side
The browser never receives the client or session secret.
Identity and access
Connect your workspace
Secure, ranked organizational context for every AI agent. Authenticate with your managed Microsoft identity to begin.
Microsoft login configured
Tenant 2000…2fbe · Application 9ee5…5235
Administrator setup
Microsoft Entra ID
Register a confidential web application and add https://ctxhub-dev.mebisoft.vn/auth/callback as its Web redirect URI.
Deployment environment
Provide these values through your production secret manager.
MICROSOFT_TENANT_ID=<directory-tenant-id>
MICROSOFT_CLIENT_ID=<application-client-id>
MICROSOFT_CLIENT_SECRET=<client-secret-value>
MICROSOFT_REDIRECT_URI=https://your-domain.example/auth/callback
MICROSOFT_SESSION_SECRET=<at-least-32-random-bytes>Use least privilege
Only OpenID profile scopes are requested by default.
Require HTTPS
Secure cookies activate automatically for an HTTPS redirect URI.