Linux Entra Bridge by Pihaar

On Linux, Microsoft Entra ID Conditional Access normally works only in Microsoft Edge, because only Edge talks to the Microsoft Identity Broker. <b>Linux Entra Bridge</b> gives Firefox the same capability.

A small native messaging host (open-source Python) requests the PRT single sign-on cookie from the local <code>microsoft-identity-broker</code> over D-Bus, and the extension places it in the browser cookie store for the Microsoft sign-in domains. Firefox then presents as a compliant device to Entra ID, so Microsoft 365, the Azure Portal, and SAML or OAuth applications behind login.microsoftonline.com work without repeated sign-ins.

<b>Requirements:</b>
<ul>
<li>A Linux device enrolled in Microsoft Intune, with microsoft-identity-broker running (Edge SSO must already work).</li>
<li>The companion native messaging host, installed system-wide via the package or the project's install script.</li>
</ul>

<b>Privacy:</b> Everything runs locally. The extension and host make no network requests of their own and send no data to the developer or any third party. The SSO token is kept in memory and never written to disk.

Open source (MIT), including the native host and the reverse-engineered broker protocol notes: <a href="https://github.com/Pihaar/linux-entra-bridge">github.com/Pihaar/linux-entra-bridge</a>