Link to azuread groups

portal/views/secure/login_success.py

@@ -14,9 +14,19 @@ class LoginSuccess(View):
         """
         user = self.request.user
 
-        if hasattr(user, 'ldapuser'):
+        azuread_groups = None
+        try:
+            azuread_groups = user.social_auth.get(provider='azuread-tenant-oauth2').extra_data['groups']
+        except:
+            pass
+
+        if hasattr(user, 'ldapuser') or azuread_groups:
             user.profile.labs.remove(*Lab.objects.filter(ldap__startswith='iric-'))
-            user.profile.labs.add(*Lab.objects.filter(ldap__in=user.ldap_user.group_names))
+
+            if hasattr(user, 'ldapuser'):
+                user.profile.labs.add(*Lab.objects.filter(ldap__in=user.ldap_user.group_names))
+            elif azuread_groups:
+                user.profile.labs.add(*Lab.objects.filter(ldap__in=azuread_groups))
 
         if self.request.user.is_staff:
             # user is an admin