I'll help you create a Single Sign-On (SSO) integration between vtiger CRM 7.1 and Microsoft. This will involve creating a custom module for vtiger that handles the OAuth2 authentication flow with Microsoft Azure AD. <?php class SSOMicrosoft extends CRMEntity { var $log; var $db; function __construct() { $this->log = LoggerManager::getLogger('SSOMicrosoft'); $this->db = PearDatabase::getInstance(); } function vtlib_handler($moduleName, $eventType) { if($eventType == 'module.postinstall') { // Module installed } else if($eventType == 'module.disabled') { // Module disabled } else if($eventType == 'module.enabled') { // Module enabled } else if($eventType == 'module.preuninstall') { // Module about to be uninstalled } else if($eventType == 'module.preupdate') { // Module about to be updated } else if($eventType == 'module.postupdate') { // Module updated } } function getMicrosoftAuthUrl() { $settings = $this->getSettings(); $params = array( 'client_id' => $settings['client_id'], 'response_type' => 'code', 'redirect_uri' => $settings['redirect_uri'], 'response_mode' => 'query', 'scope' => 'openid email profile', 'state' => session_id() ); return 'https://login.microsoftonline.com/common/oauth2/v2.0/authorize?' . http_build_query($params); } function getAccessToken($code) { $settings = $this->getSettings(); $params = array( 'client_id' => $settings['client_id'], 'client_secret' => $settings['client_secret'], 'code' => $code, 'grant_type' => 'authorization_code', 'redirect_uri' => $settings['redirect_uri'] ); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, 'https://login.microsoftonline.com/common/oauth2/v2.0/token'); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($params)); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); curl_close($ch); return json_decode($response, true); } function getUserInfo($access_token) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, 'https://graph.microsoft.com/v1.0/me'); curl_setopt($ch, CURLOPT_HTTPHEADER, array( 'Authorization: Bearer ' . $access_token, 'Content-Type: application/json' )); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); curl_close($ch); return json_decode($response, true); } function getSettings() { global $adb; $result = $adb->pquery("SELECT * FROM vtiger_sso_microsoft_settings", array()); if($adb->num_rows($result) > 0) { return $adb->query_result_rowdata($result, 0); } return array(); } function saveSettings($data) { global $adb; $adb->pquery("DELETE FROM vtiger_sso_microsoft_settings", array()); $adb->pquery("INSERT INTO vtiger_sso_microsoft_settings (client_id, client_secret, redirect_uri) VALUES (?, ?, ?)", array($data['client_id'], $data['client_secret'], $data['redirect_uri'])); } } ?> <?php require_once('modules/SSOMicrosoft/SSOMicrosoft.php'); $sso = new SSOMicrosoft(); if(isset($_POST['save'])) { $sso->saveSettings($_POST); header("Location: index.php?module=SSOMicrosoft&view=Settings&saved=1"); exit; } $settings = $sso->getSettings(); ?> <div class="container-fluid"> <div class="row"> <div class="col-lg-12"> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Microsoft SSO Settings</h3> </div> <div class="panel-body"> <?php if(isset($_GET['saved'])): ?> <div class="alert alert-success">Settings saved successfully!</div> <?php endif; ?> <form method="post" action=""> <div class="form-group"> <label>Client ID</label> <input type="text" name="client_id" class="form-control" value="<?php echo $settings['client_id'] ?? ''; ?>" required /> </div> <div class="form-group"> <label>Client Secret</label> <input type="text" name="client_secret" class="form-control" value="<?php echo $settings['client_secret'] ?? ''; ?>" required /> </div> <div class="form-group"> <label>Redirect URI</label> <input type="text" name="redirect_uri" class="form-control" value="<?php echo $settings['redirect_uri'] ?? ''; ?>" required /> <small class="text-muted">Must match exactly with the redirect URI registered in Azure AD</small> </div> <button type="submit" name="save" class="btn btn-primary">Save Settings</button> </form> </div> </div> </div> </div> </div> <?php require_once('modules/SSOMicrosoft/SSOMicrosoft.php'); $sso = new SSOMicrosoft(); if(isset($_GET['code'])) { $token = $sso->getAccessToken($_GET['code']); if(isset($token['access_token'])) { $userInfo = $sso->getUserInfo($token['access_token']); // Check if user exists in vtiger $user = CRMEntity::getInstance('Users'); $user->retrieve_entity_info($userInfo['mail'], 'Users'); if($user->id) { // User exists, log them in $_SESSION['authenticated_user_id'] = $user->id; $_SESSION['app_unique_key'] = vglobal('application_unique_key'); header("Location: index.php"); exit; } else { // User doesn't exist die("User not found in vtiger CRM"); } } else { die("Error getting access token"); } } else { header("Location: " . $sso->getMicrosoftAuthUrl()); exit; } ?> <?php $mod_strings = array( 'LBL_SSO_MICROSOFT_SETTINGS' => 'Microsoft SSO Settings', 'LBL_SSO_MICROSOFT_DESCRIPTION' => 'Configure Single Sign-On with Microsoft', ); ?> <?xml version="1.0"?> <module> <type>extension</type> <name>SSOMicrosoft</name> <label>Microsoft SSO</label> <version>1.0</version> <dependencies> <vtiger_version>7.1.0</vtiger_version> <vtiger_max_version>7.*</vtiger_max_version> </dependencies> </module> <div class="col-sm-12 col-xs-12 module-action-bar clearfix"> <div class="module-action-content clearfix"> <span class="col-lg-7 col-md-7 module-breadcrumb module-breadcrumb-<?php echo $MODULE ?>"> <?php $MODULE_NAME = $mod_strings['LBL_SSO_MICROSOFT_SETTINGS']; echo $MODULE_NAME; ?> </span> </div> </div> To complete the setup: 1. Create the database table: `CREATE TABLE vtiger_sso_microsoft_settings (client_id VARCHAR(255), client_secret VARCHAR(255), redirect_uri VARCHAR(255))` 2. Register your application in Azure AD and configure the redirect URI 3. Install the module in vtiger CRM 4. Configure the settings with your Azure AD credentials