scimgateway 4.2.17 → 4.3.0

package/lib/plugin-loki.js

@@ -48,49 +48,66 @@ scimgateway.authPassThroughAllowed = false // true enables auth passThrough (no
 
 // let endpointPasswordExample = scimgateway.getPassword('endpoint.password', configFile); // example how to encrypt configfile having "endpoint.password"
 
-let users
-let groups
 const validFilterOperators = ['eq', 'ne', 'aeq', 'dteq', 'gt', 'gte', 'lt', 'lte', 'between', 'jgt', 'jgte', 'jlt', 'jlte', 'jbetween', 'regex', 'in', 'nin', 'keyin', 'nkeyin', 'definedin', 'undefinedin', 'contains', 'containsAny', 'type', 'finite', 'size', 'len', 'exists']
 
-let dbname = (config.dbname ? config.dbname : 'loki.db')
-dbname = path.join(`${configDir}`, `${dbname}`)
-const db = new Loki(dbname, {
-  env: 'NODEJS',
-  autoload: config.persistence !== false,
-  autoloadCallback: loadHandler,
-  autosave: config.persistence !== false,
-  autosaveInterval: 10000, // 10 seconds
-  adapter: (config.persistence !== false) ? new Loki.LokiFsAdapter() : new Loki.LokiMemoryAdapter()
-})
-
-function loadHandler () {
-  users = db.getCollection('users')
-  if (users === null) { // if database do not exist it will be empty so intitialize here
-    users = db.addCollection('users', {
-      unique: ['id', 'userName']
-    })
+const dbNames = []
+for (const baseEntity in config.entity) {
+  let dbname = (config.entity[baseEntity].dbname ? config.entity[baseEntity].dbname : 'loki.db')
+  if (dbNames.includes(dbname)) {
+    scimgateway.logger.error(`${pluginName}[${baseEntity}] initialization error: database '${dbname}' is already used by another baseEntity configuration`)
+    continue
   }
+  dbNames.push(dbname)
+  dbname = path.join(`${configDir}`, `${dbname}`)
+  const isPersisence = config.entity[baseEntity].persistence !== false
+
+  const db = new Loki(dbname, {
+    env: baseEntity === 'undefined' ? 'N/A' : baseEntity, // avoid default NODEJS
+    autoload: isPersisence,
+    autoloadCallback: isPersisence ? loadHandler : null,
+    autosave: isPersisence,
+    autosaveInterval: 10000, // 10 seconds
+    adapter: isPersisence ? new Loki.LokiFsAdapter() : new Loki.LokiMemoryAdapter()
+  })
+  config.entity[baseEntity].db = db
+
+  function loadHandler () {
+    let users = db.getCollection('users')
+    if (users === null) { // if database do not exist it will be empty so intitialize here
+      users = db.addCollection('users', {
+        unique: ['id', 'userName']
+      })
+    }
 
-  groups = db.getCollection('groups')
-  if (groups === null) {
-    groups = db.addCollection('groups', {
-      unique: ['displayName']
-    })
-  }
+    let groups = db.getCollection('groups')
+    if (groups === null) {
+      groups = db.addCollection('groups', {
+        unique: ['displayName']
+      })
+    }
 
-  if (db.options.autoload === false) { // not using persistence (physical database) => load testusers
-    scimgateway.testmodeusers.forEach(record => {
-      if (record.meta) delete record.meta
-      users.insert(record)
-    })
-    scimgateway.testmodegroups.forEach(record => {
-      if (record.meta) delete record.meta
-      groups.insert(record)
-    })
+    if (!isPersisence) { // load testusers
+      scimgateway.testmodeusers.forEach(record => {
+        const r = scimgateway.copyObj(record)
+        if (r.meta) delete r.meta
+        users.insert(r)
+      })
+      scimgateway.testmodegroups.forEach(record => {
+        const r = scimgateway.copyObj(record)
+        if (r.meta) delete r.meta
+        groups.insert(r)
+      })
+    }
+
+    let baseEntity = db.ENV
+    if (baseEntity === 'N/A') baseEntity = undefined
+    config.entity[baseEntity].users = users
+    config.entity[baseEntity].groups = groups
   }
-}
 
-if (db.options.autoload === false) loadHandler()
+  // if (db.options.autoload === false) loadHandler(baseEntity)
+  if (!isPersisence) loadHandler()
+}
 
 // =================================================
 // getUsers
@@ -111,6 +128,9 @@ scimgateway.getUsers = async (baseEntity, getObj, attributes, ctx) => {
   const action = 'getUsers'
   scimgateway.logger.debug(`${pluginName}[${baseEntity}] handling "${action}" getObj=${getObj ? JSON.stringify(getObj) : ''} attributes=${attributes}`)
 
+  if (!config.entity[baseEntity]) throw new Error(`unsupported baseEntity=${baseEntity}`)
+  const users = config.entity[baseEntity].users
+
   if (getObj.operator) { // convert to plugin supported syntax
     switch (getObj.operator) {
       case 'co':
@@ -200,6 +220,8 @@ scimgateway.createUser = async (baseEntity, userObj, ctx) => {
   const action = 'createUser'
   scimgateway.logger.debug(`${pluginName}[${baseEntity}] handling "${action}" userObj=${JSON.stringify(userObj)}`)
 
+  if (!config.entity[baseEntity]) throw new Error(`unsupported baseEntity=${baseEntity}`)
+  const users = config.entity[baseEntity].users
   const notValid = scimgateway.notValidAttributes(userObj, validScimAttr) // We should check for unsupported endpoint attributes
   if (notValid) {
     throw new Error(`${action} error: unsupported scim attributes: ${notValid} (supporting only these attributes: ${validScimAttr.toString()})`)
@@ -241,6 +263,8 @@ scimgateway.deleteUser = async (baseEntity, id, ctx) => {
   const action = 'deleteUser'
   scimgateway.logger.debug(`${pluginName}[${baseEntity}] handling "${action}" id=${id}`)
 
+  if (!config.entity[baseEntity]) throw new Error(`unsupported baseEntity=${baseEntity}`)
+  const users = config.entity[baseEntity].users
   const res = users.find({ id: id })
   if (res.length !== 1) throw new Error(`${action} error: failed for user id=${id}`)
   const userObj = res[0]
@@ -255,6 +279,8 @@ scimgateway.modifyUser = async (baseEntity, id, attrObj, ctx) => {
   const action = 'modifyUser'
   scimgateway.logger.debug(`${pluginName}[${baseEntity}] handling "${action}" id=${id} attrObj=${JSON.stringify(attrObj)}`)
 
+  if (!config.entity[baseEntity]) throw new Error(`unsupported baseEntity=${baseEntity}`)
+  const users = config.entity[baseEntity].users
   const notValid = scimgateway.notValidAttributes(attrObj, validScimAttr) // We should check for unsupported endpoint attributes
   if (notValid) {
     throw new Error(`${action} error: unsupported scim attributes: ${notValid} (supporting only these attributes: ${validScimAttr.toString()})`)
@@ -374,6 +400,9 @@ scimgateway.getGroups = async (baseEntity, getObj, attributes, ctx) => {
   const action = 'getGroups'
   scimgateway.logger.debug(`${pluginName}[${baseEntity}] handling "${action}" getObj=${getObj ? JSON.stringify(getObj) : ''} attributes=${attributes}`)
 
+  if (!config.entity[baseEntity]) throw new Error(`unsupported baseEntity=${baseEntity}`)
+  const groups = config.entity[baseEntity].groups
+
   if (getObj.operator) { // convert to plugin supported syntax
     switch (getObj.operator) {
       case 'co':
@@ -463,6 +492,8 @@ scimgateway.createGroup = async (baseEntity, groupObj, ctx) => {
   const action = 'createGroup'
   scimgateway.logger.debug(`${pluginName}[${baseEntity}] handling "${action}" groupObj=${JSON.stringify(groupObj)}`)
 
+  if (!config.entity[baseEntity]) throw new Error(`unsupported baseEntity=${baseEntity}`)
+  const groups = config.entity[baseEntity].groups
   if (groupObj.externalId) groupObj.id = groupObj.externalId // for loki-plugin (scim endpoint) id is mandatory and set to displayName
   else groupObj.id = groupObj.displayName
 
@@ -485,6 +516,8 @@ scimgateway.deleteGroup = async (baseEntity, id, ctx) => {
   const action = 'deleteGroup'
   scimgateway.logger.debug(`${pluginName}[${baseEntity}] handling "${action}" id=${id}`)
 
+  if (!config.entity[baseEntity]) throw new Error(`unsupported baseEntity=${baseEntity}`)
+  const groups = config.entity[baseEntity].groups
   const res = groups.find({ id: id })
   if (res.length !== 1) throw new Error(`${action} error: failed for id=${id}`)
   const groupObj = res[0]
@@ -499,6 +532,8 @@ scimgateway.modifyGroup = async (baseEntity, id, attrObj, ctx) => {
   const action = 'modifyGroup'
   scimgateway.logger.debug(`${pluginName}[${baseEntity}] handling "${action}" id=${id} attrObj=${JSON.stringify(attrObj)}`)
 
+  if (!config.entity[baseEntity]) throw new Error(`unsupported baseEntity=${baseEntity}`)
+  const groups = config.entity[baseEntity].groups
   const res = groups.find({ id: id })
   if (res.length === 0) throw new Error(`${action} error: group id=${id} - group does not exist`)
   if (res.length > 1) throw new Error(`${action} error: group id=${id} - group is not unique, more than one have been found`)
@@ -569,8 +604,12 @@ const stripLoki = (obj) => { // remove loki meta data and insert scim
 // Cleanup on exit
 //
 process.on('SIGTERM', () => { // kill
-  db.close()
+  for (const baseEntity in config.entity) {
+    if (config.entity[baseEntity].db) config.entity[baseEntity].db.close()
+  }
 })
 process.on('SIGINT', () => { // Ctrl+C
-  db.close()
+  for (const baseEntity in config.entity) {
+    if (config.entity[baseEntity].db) config.entity[baseEntity].db.close()
+  }
 })

package/lib/plugin-scim.js

@@ -65,6 +65,7 @@ scimgateway.authPassThroughAllowed = false // true enables auth passThrough (no
 // mandatory plugin initialization - end
 
 const _serviceClient = {}
+const lock = new scimgateway.Lock()
 
 // =================================================
 // getUsers
@@ -552,6 +553,10 @@ scimgateway.modifyGroup = async (baseEntity, id, attrObj, ctx) => {
 // helpers
 // =================================================
 
+//
+// start - REST endpoint template
+//
+
 const getClientIdentifier = (ctx) => {
   if (!ctx?.request?.header?.authorization) return undefined
   const [user, secret] = getCtxAuth(ctx)
@@ -561,7 +566,7 @@ const getClientIdentifier = (ctx) => {
 //
 // getCtxAuth returns username/secret from ctx header when using Auth PassThrough
 //
-const getCtxAuth = (ctx) => { // eslint-disable-line
+const getCtxAuth = (ctx) => {
   if (!ctx?.request?.header?.authorization) return []
   const [authType, authToken] = (ctx.request.header.authorization || '').split(' ') // [0] = 'Basic' or 'Bearer'
   let username, password
@@ -570,6 +575,85 @@ const getCtxAuth = (ctx) => { // eslint-disable-line
   else return [undefined, authToken] // bearer auth
 }
 
+//
+// getAccessToken - returns oauth accesstoken
+//
+const getAccessToken = async (baseEntity, ctx) => {
+  await lock.acquire()
+  const clientIdentifier = getClientIdentifier(ctx)
+  const d = new Date() / 1000 // seconds (unix time)
+  if (_serviceClient[baseEntity] && _serviceClient[baseEntity][clientIdentifier] && _serviceClient[baseEntity][clientIdentifier].accessToken &&
+   (_serviceClient[baseEntity][clientIdentifier].accessToken.validTo >= d + 30)) { // avoid simultaneously token requests
+    lock.release()
+    return _serviceClient[baseEntity][clientIdentifier].accessToken
+  }
+
+  const action = 'getAccessToken'
+  scimgateway.logger.debug(`${pluginName}[${baseEntity}] ${action}: Retrieving accesstoken`)
+
+  const method = 'POST'
+  const [, secret] = getCtxAuth(ctx) // if Auth PassTrough, secret from basic or bearer auth
+  let tokenUrl
+  let form
+
+  if (config.entity[baseEntity].oauth) {
+    let resource
+    try {
+      const urlObj = new URL(config.entity[baseEntity].baseUrls[0])
+      resource = urlObj.origin
+    } catch (err) {
+      resource = null
+    }
+    if (config.entity[baseEntity].oauth.tenantIdGUID) { // Azure
+      tokenUrl = `https://login.microsoftonline.com/${config.entity[baseEntity].oauth.tenantIdGUID}/oauth2/token`
+    } else {
+      tokenUrl = `https://login.microsoftonline.com/${config.entity[baseEntity].oauth.tokenUrl}`
+    }
+    form = {
+      grant_type: 'client_credentials',
+      client_id: config.entity[baseEntity].oauth.clientId,
+      client_secret: secret || scimgateway.getPassword(`endpoint.entity.${baseEntity}.oauth.clientSecret`, configFile), // using config if no Auth PassThrough
+      resource: resource // "https://graph.microsoft.com"
+    }
+  } else {
+    const err = new Error(`[${action}] missing supported endpoint authentication configuration`)
+    lock.release()
+    throw (err)
+  }
+
+  const options = {
+    headers: {
+      'Content-Type': 'application/x-www-form-urlencoded' // body must be query string formatted (no JSON)
+    }
+  }
+
+  try {
+    const response = await doRequest(baseEntity, method, tokenUrl, form, ctx, options)
+    if (!response.body) {
+      const err = new Error(`[${action}] No data retrieved from: ${method} ${tokenUrl}`)
+      throw (err)
+    }
+    const jbody = response.body
+    if (jbody.error) {
+      const err = new Error(`[${action}] Error message: ${jbody.error_description}`)
+      throw (err)
+    } else if (!jbody.access_token || !jbody.expires_in) {
+      const err = new Error(`[${action}] Error message: Retrieved invalid token response`)
+      throw (err)
+    }
+
+    const d = new Date() / 1000 // seconds (unix time)
+    jbody.validTo = d + parseInt(jbody.expires_in) // instead of using expires_on (clock may not be in sync with NTP, AAD default expires_in = 3600 seconds)
+    scimgateway.logger.silly(`${pluginName}[${baseEntity}] ${action}: AccessToken =  ${jbody.access_token}`)
+
+    lock.release()
+    return jbody
+  } catch (err) {
+    lock.release()
+    throw (err)
+  }
+}
+
 //
 // getServiceClient - returns options needed for connection parameters
 //
@@ -582,6 +666,11 @@ const getCtxAuth = (ctx) => { // eslint-disable-line
 const getServiceClient = async (baseEntity, method, path, opt, ctx) => {
   const action = 'getServiceClient'
 
+  let authType
+  if (config.entity[baseEntity].basicAuth) authType = 'basicAuth'
+  else if (config.entity[baseEntity].oauth) authType = 'oauth'
+  else if (config.entity[baseEntity].bearerAuth) authType = 'bearerAuth'
+
   let urlObj
   if (!path) path = ''
   try {
@@ -590,17 +679,38 @@ const getServiceClient = async (baseEntity, method, path, opt, ctx) => {
     //
     // path (no url) - default approach and client will be cached based on config
     //
+
     const clientIdentifier = getClientIdentifier(ctx)
-    if (_serviceClient[baseEntity] && _serviceClient[baseEntity][clientIdentifier]) { // serviceClient already exist
+    if (_serviceClient[baseEntity] && _serviceClient[baseEntity][clientIdentifier]) { // serviceClient already exist - Azure plugin specific
       scimgateway.logger.debug(`${pluginName}[${baseEntity}] ${action}: Using existing client`)
+      if (_serviceClient[baseEntity][clientIdentifier].accessToken) {
+      // check if token refresh is needed when using oauth
+        const d = new Date() / 1000 // seconds (unix time)
+        if (_serviceClient[baseEntity][clientIdentifier].accessToken.validTo < d + 30) { // less than 30 sec before token expiration
+          scimgateway.logger.debug(`${pluginName}[${baseEntity}] ${action}: Accesstoken about to expire in ${_serviceClient[baseEntity][clientIdentifier].accessToken.validTo - d} seconds`)
+          try {
+            const accessToken = await getAccessToken(baseEntity, ctx)
+            _serviceClient[baseEntity][clientIdentifier].accessToken = accessToken
+            _serviceClient[baseEntity][clientIdentifier].options.headers.Authorization = ` Bearer ${accessToken.access_token}`
+          } catch (err) {
+            delete _serviceClient[baseEntity][clientIdentifier]
+            const newErr = err
+            throw newErr
+          }
+        }
+      }
     } else {
       scimgateway.logger.debug(`${pluginName}[${baseEntity}] ${action}: Client have to be created`)
       let client = null
       if (config.entity && config.entity[baseEntity]) client = config.entity[baseEntity]
       if (!client) {
-        throw new Error(`Base URL have baseEntity=${baseEntity}, and configuration file ${pluginName}.json is missing required baseEntity configuration for ${baseEntity}`)
+        const err = new Error(`Base URL have baseEntity=${baseEntity}, and configuration file ${pluginName}.json is missing required baseEntity configuration for ${baseEntity}`)
+        throw err
+      }
+      if (!config.entity[baseEntity].baseUrls || !Array.isArray(config.entity[baseEntity].baseUrls) || config.entity[baseEntity].baseUrls.length < 1) {
+        const err = new Error(`missing configuration entity.${baseEntity}.baseUrls`)
+        throw err
       }
-
       urlObj = new URL(config.entity[baseEntity].baseUrls[0])
       const param = {
         baseUrl: config.entity[baseEntity].baseUrls[0],
@@ -608,17 +718,46 @@ const getServiceClient = async (baseEntity, method, path, opt, ctx) => {
           json: true, // json-object response instead of string
           headers: {
             'Content-Type': 'application/json',
-            // Auth PassThrough or configuration, using ctx "AS-IS" header for PassThrough. For more advanced logic use getCtxAuth(ctx) - see examples in other plugins
-            Authorization: ctx?.request?.header?.authorization ? ctx.request.header.authorization : 'Basic ' + Buffer.from(`${config.entity[baseEntity].username}:${scimgateway.getPassword(`endpoint.entity.${baseEntity}.password`, configFile)}`).toString('base64')
+            Accept: 'application/json'
           },
           host: urlObj.hostname,
           port: urlObj.port, // null if https and 443 defined in url
-          protocol: urlObj.protocol, // http: or https:
-          rejectUnauthorized: false // accepts self-siged certificates
+          protocol: urlObj.protocol // http: or https:
           // 'method' and 'path' added at the end
         }
       }
 
+      if (ctx?.request?.header?.authorization) { // Auth PassThrough using ctx header
+        param.options.headers.Authorization = ctx.request.header.authorization
+      } else {
+        switch (authType) {
+          case 'basicAuth':
+            if (!config.entity[baseEntity].basicAuth.username || !config.entity[baseEntity].basicAuth.password) {
+              const err = new Error(`missing configuration entity.${baseEntity}.basicAuth.username/password`)
+              throw err
+            }
+            param.options.headers.Authorization = 'Basic ' + Buffer.from(`${config.entity[baseEntity].basicAuth.username}:${scimgateway.getPassword(`endpoint.entity.${baseEntity}.basicAuth.password`, configFile)}`).toString('base64')
+            break
+          case 'oauth':
+            if (!config.entity[baseEntity].oauth.clientId || !config.entity[baseEntity].oauth.clientSecret) {
+              const err = new Error(`missing configuration entity.${baseEntity}.oauth.clientId/clientSecret`)
+              throw err
+            }
+            param.accessToken = await getAccessToken(baseEntity, ctx)
+            param.options.headers.Authorization = `Bearer ${param.accessToken.access_token}`
+            break
+          case 'bearerAuth':
+            if (!config.entity[baseEntity].bearerAuth.token) {
+              const err = new Error(`missing configuration entity.${baseEntity}.bearerAuth.token`)
+              throw err
+            }
+            param.options.headers.Authorization = 'Bearer ' + Buffer.from(`${scimgateway.getPassword(`endpoint.entity.${baseEntity}.bearerAuth.token`, configFile)}`).toString('base64')
+            break
+          default:
+            // no auth
+        }
+      }
+
       // proxy
       if (config.entity[baseEntity].proxy && config.entity[baseEntity].proxy.host) {
         const agent = new HttpsProxyAgent(config.entity[baseEntity].proxy.host)
@@ -628,9 +767,17 @@ const getServiceClient = async (baseEntity, method, path, opt, ctx) => {
         }
       }
 
+      // config options
+      if (config.entity[baseEntity].options) param.options = scimgateway.extendObj(param.options, config.entity[baseEntity].options)
+
       if (!_serviceClient[baseEntity]) _serviceClient[baseEntity] = {}
       if (!_serviceClient[baseEntity][clientIdentifier]) _serviceClient[baseEntity][clientIdentifier] = {}
       _serviceClient[baseEntity][clientIdentifier] = param // serviceClient created
+
+      // OData support - note, not using [clientIdentifier]
+      _serviceClient[baseEntity].nextLink = {}
+      _serviceClient[baseEntity].nextLink.users = null // Azure users pagination
+      _serviceClient[baseEntity].nextLink.groups = null // Azure groups pagination
     }
 
     const cli = scimgateway.copyObj(_serviceClient[baseEntity][clientIdentifier]) // client ready
@@ -700,6 +847,7 @@ const doRequest = async (baseEntity, method, path, body, ctx, opt, retryCount) =
   try {
     const cli = await getServiceClient(baseEntity, method, path, opt, ctx)
     const options = cli.options
+
     const result = await new Promise((resolve, reject) => {
       let dataString = ''
       if (body) {
@@ -749,17 +897,19 @@ const doRequest = async (baseEntity, method, path, body, ctx, opt, retryCount) =
       req.end()
     }) // Promise
 
-    scimgateway.logger.debug(`${pluginName}[${baseEntity}] doRequest ${method} ${options.protocol}//${options.host}${(options.port ? `:${options.port}` : '')}${path} Body = ${JSON.stringify(body)} Response = ${JSON.stringify(result)}`)
+    scimgateway.logger.debug(`${pluginName}[${baseEntity}] doRequest ${method} ${options.protocol}//${options.host}${(options.port ? `:${options.port}` : '')}${options.path} Body = ${JSON.stringify(body)} Response = ${JSON.stringify(result)}`)
     return result
   } catch (err) { // includes failover/retry logic based on config baseUrls array
-    scimgateway.logger.error(`${pluginName}[${baseEntity}] doRequest ${method} ${path} Body = ${JSON.stringify(body)} Error Response = ${err.message}`)
     let statusCode
     try { statusCode = JSON.parse(err.message).statusCode } catch (e) {}
+    if (statusCode === 404) { // not logged as error, let caller decide e.g. getUser-manager
+      scimgateway.logger.debug(`${pluginName}[${baseEntity}] doRequest ${method} ${path} Body = ${JSON.stringify(body)} Error Response = ${err.message}`)
+    } else scimgateway.logger.error(`${pluginName}[${baseEntity}] doRequest ${method} ${path} Body = ${JSON.stringify(body)} Error Response = ${err.message}`)
     const clientIdentifier = getClientIdentifier(ctx)
     if (!retryCount) retryCount = 0
     let urlObj
     try { urlObj = new URL(path) } catch (err) {}
-    if (!urlObj && (err.code === 'ECONNREFUSED' || err.code === 'ENOTFOUND')) {
+    if (!urlObj && (err.code === 'ECONNREFUSED' || err.code === 'ENOTFOUND' || err.code === 'ETIMEDOUT')) {
       if (retryCount < config.entity[baseEntity].baseUrls.length) {
         retryCount++
         updateServiceClient(baseEntity, clientIdentifier, { baseUrl: config.entity[baseEntity].baseUrls[retryCount - 1] })
@@ -774,11 +924,15 @@ const doRequest = async (baseEntity, method, path, body, ctx, opt, retryCount) =
       }
     } else {
       if (statusCode === 401 && _serviceClient[baseEntity]) delete _serviceClient[baseEntity][clientIdentifier]
-      throw err // CA IM retries getUsers failure once (retry 6 times on ECONNREFUSED)
+      throw err // CA IM retries getUser failure once (retry 6 times on ECONNREFUSED)
     }
   }
 } // doRequest
 
+//
+// end - REST endpoint template
+//
+
 //
 // Cleanup on exit
 //

package/lib/postinstall.js

@@ -33,7 +33,7 @@ if (!fsExistsSync('../../config/plugin-soap.json')) fs.writeFileSync('../../conf
 if (!fsExistsSync('../../config/plugin-mssql.json')) fs.writeFileSync('../../config/plugin-mssql.json', fs.readFileSync('./config/plugin-mssql.json'))
 if (!fsExistsSync('../../config/plugin-saphana.json')) fs.writeFileSync('../../config/plugin-saphana.json', fs.readFileSync('./config/plugin-saphana.json'))
 if (!fsExistsSync('../../config/plugin-api.json')) fs.writeFileSync('../../config/plugin-api.json', fs.readFileSync('./config/plugin-api.json'))
-if (!fsExistsSync('../../config/plugin-azure-ad.json')) fs.writeFileSync('../../config/plugin-azure-ad.json', fs.readFileSync('./config/plugin-azure-ad.json')) // keep existing
+if (!fsExistsSync('../../config/plugin-entra-id.json')) fs.writeFileSync('../../config/plugin-entra-id.json', fs.readFileSync('./config/plugin-entra-id.json')) // keep existing
 if (!fsExistsSync('../../config/plugin-ldap.json')) fs.writeFileSync('../../config/plugin-ldap.json', fs.readFileSync('./config/plugin-ldap.json'))
 if (!fsExistsSync('../../config/plugin-mongodb.json')) fs.writeFileSync('../../config/plugin-mongodb.json', fs.readFileSync('./config/plugin-mongodb.json'))
 
@@ -43,7 +43,7 @@ fs.writeFileSync('../../lib/plugin-soap.js', fs.readFileSync('./lib/plugin-soap.
 fs.writeFileSync('../../lib/plugin-mssql.js', fs.readFileSync('./lib/plugin-mssql.js'))
 fs.writeFileSync('../../lib/plugin-saphana.js', fs.readFileSync('./lib/plugin-saphana.js'))
 fs.writeFileSync('../../lib/plugin-api.js', fs.readFileSync('./lib/plugin-api.js'))
-fs.writeFileSync('../../lib/plugin-azure-ad.js', fs.readFileSync('./lib/plugin-azure-ad.js'))
+fs.writeFileSync('../../lib/plugin-entra-id.js', fs.readFileSync('./lib/plugin-entra-id.js'))
 fs.writeFileSync('../../lib/plugin-ldap.js', fs.readFileSync('./lib/plugin-ldap.js'))
 fs.writeFileSync('../../lib/plugin-mongodb.js', fs.readFileSync('./lib/plugin-mongodb.js'))