Create a new OAuth 2.0 Client
in Microsoft portal
"Add" {'->'} "App Registration" -> "Accounts in this organizational directory only (Default
Directory only - Single tenant)", and in the "Authentication" tab, set the redirect URI to
Web and
BASE_URL/user/login_callback/microsoft. Then copy the "Directory (tenant
ID)" in the tenant ID field. Then copy the Client ID from "Application (client) ID" and
create a secret in "Client credentials". Last, include "Sign in" and "read user profile"
under "Delegated Permissions".