From 5996cac3278138836795cb66b9a2eda3a2f53855 Mon Sep 17 00:00:00 2001
From: Kieran Lane <kieranml@element.io>
Date: Tue, 18 Mar 2025 10:44:45 +0000
Subject: [PATCH] Disable Verification for Microsoft Azure AD OIDC

Required to avoid `token_endpoint missing auth signing algorithm values` error.
---
 docs/setup/sso.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/setup/sso.md b/docs/setup/sso.md
index 38da8a217..7593737fa 100644
--- a/docs/setup/sso.md
+++ b/docs/setup/sso.md
@@ -434,6 +434,7 @@ upstream_oauth2:
       client_id: "<client-id>" # TO BE FILLED
       client_secret: "<client-secret>" # TO BE FILLED
       scope: "openid profile email"
+      discovery_mode: insecure
 
       claims_imports:
         localpart: