howdy/auth/providers/entra

Microsoft Entra ID OpenID Connect server flow. Only identity scopes are requested; Microsoft access and refresh tokens are never stored or returned. Email claims barely exist on Microsoft accounts: many consumer identities carry no mail claim at all, so a provider sign-in proves who signed in, while a new local account still needs an email Howdy verified itself, or an explicit link from an existing account.

pub fn new(
  client_id client_id: String,
  client_secret client_secret: String,
  tenant tenant: String,
) -> provider.Provider