What Callback URL to use that will handle code from Azure AD

[Mark Sayo]

Hi guys,

We are using Scriptrunner to get a valid authorization response from Azure AD. The response is needed to get the authorization code needed to successfully request an access token. 

Below are screenshots showing the ScriptRunner script that we use and the response to the authorization request.

Note the JSON Auth: null response to the initial authorization request in lines 16-19. Due to the null response to the auth request, the subsequent request for an Access Token fails, with the message that the authorization ‘code’ parameter is missing.

[Kristian Walker _Adaptavist_]

Hi Mark,

Thank you for your question.

I can confirm that it is possible to write scripts that would interact with an external application such as Slack, as long as the application contains a REST API which can be called to interact with it. We have an example in our library script, which you can use as a reference guide when writing a script to make external requests.

In order to achieve this requirement, you should review the REST API documentation for the external application in order to see what REST APIs you will need to use to achieve this.

We would advise contacting the third-party applications support team if you have any questions about how their third-party API works.

We have a documentation example located here which shows how you can post a message to Slack and this example may prove a useful reference in helping you to create the script that you require, as it shows an example of making an API call to an external REST API.

Finally, I can confirm Atlassian does not permit our app to access any of the private REST APIs they provide and means we are only allowed to access the public APIs they provide when calling the Jira Cloud API but for external APIs you can call them and can use the steps above to do this.

As for the Azure API's I am not familiar with these myself so cannot advise on how to use these, but I would advise asking Microsoft support about the structure these API requests require.

I hope this information helps.

Regards,

Kristian