- Shipped
- 4 செப்டம்பர், 2026 அன்று 2:48 AM UTC
- Author
- Kamo
- Commit
- ae4a41b
The per-phone-server credentials still win — that is the most specific source. What changes is the fallback underneath them: the org's own MICROSOFT_TEAMS registration if it has one, and only then Kamo's multi-tenant app. The redirect URI is org-scoped for the same reason it is registration data at all: an org on its own Entra app registered its own, and Microsoft requires the value replayed on the token exchange to match the authorization byte-for-byte. So the callback resolves it under the same org it authorized under.