Allow using federated credential for Microsoft Graph authentication

Feature requests
1

  1. What is your original issue/pain point you want to solve?
    Currently OAuth based Entra ID authentication for SSO and email only supports using a client secret for authentication. This requires the administrator to periodically renew this credential. If an administrator forgets, SSO or email will break.

  2. Which are one or two concrete situations where this problem hurts the most?
    Renewing the secret periodically

  3. Why is it not solvable with the Zammad standard?
    Zammad doesn’t support using a federated credential for OAuth flows

  4. What is your expectation/what do you want to achieve?
    I’d like to use a federated credential, such as a managed identity or a token acquired via azure-workload-identity to authenticate to Entra ID

If there is any more useful information, feel free to share it all (e.g.: mockup screenshots, if something is UI related, or the API URL/documentation URL for a service you need a connection to).

OAuth 2.0 client credentials flow on the Microsoft identity platform - Microsoft identity platform | Microsoft Learn