關於此附加元件
On Linux, signing in to Microsoft 365 or Exchange accounts in Thunderbird goes through Microsoft Entra ID, where Conditional Access (Intune device compliance) normally works only in Microsoft Edge, because only Edge talks to the Microsoft Identity Broker. Linux Entra Bridge closes that gap for Thunderbird.
A companion native messaging host (open-source Python) requests the PRT single sign-on cookie from the local
Requirements:
Privacy: Everything runs locally. The extension and host make no network requests of their own and send no data to the developer or any third party. The SSO token is kept in memory and never written to disk.
Open source (MIT), including the native host and the reverse-engineered broker protocol notes: github.com/Pihaar/linux-entra-bridge
A companion native messaging host (open-source Python) requests the PRT single sign-on cookie from the local
microsoft-identity-broker service over D-Bus, and the extension sets it for the Microsoft sign-in domains. Thunderbird's built-in OAuth sign-in window for Microsoft 365 and Exchange accounts then reuses your device's existing SSO session, without repeated logins, and presents the device as compliant to Entra ID.Requirements:
- A Linux device enrolled in Microsoft Intune, with microsoft-identity-broker running (Edge SSO must already work).
- The companion native messaging host, installed system-wide via the package or the project's install script.
Privacy: Everything runs locally. The extension and host make no network requests of their own and send no data to the developer or any third party. The SSO token is kept in memory and never written to disk.
Open source (MIT), including the native host and the reverse-engineered broker protocol notes: github.com/Pihaar/linux-entra-bridge