It requires Microsoft Graph Application registration. Start at the Microsoft Azure portal:
https://azure.microsoft.com/en-us/features/azure-portal/

Application registration: Go to the App registrations and click on New registration:



Name it. Select Single-page Application as a platform. The redirect URL must end withWebInterface/login.html. Then click on register.



Make sure that MSAL.js 2.0 and Implicit grant (Access Token, ID Token) grant types are permitted.



Configure the API permissions:



Get Client ID and Tenant ID from App registration -> Overview.



Group info:

You can add groups claim to the token.

!!!Continue on: CrushOIDC