Microsoft 365 gatekeeper (Entra sign in, Outlook, Calendar, OneDrive/SharePoint, Teams). Would you take this upstream?

[markmusson]

I'm deploying Cloudflare OS for a company that runs entirely on Microsoft 365, with no Google accounts at all. That currently means no way to sign in and no mail, calendar, or file integrations. I'm building a gatekeeper-microsoft package to close that gap, modeled closely on the existing gatekeepers:

• Entra ID sign in (providesAuth), with the verified email taken from the ID token claims
• Outlook mail, matching the Gmail gatekeeper's shape, including scoped introductions (a folder or a search query rather than the whole mailbox) and unsimulated sends behind approval
• Calendar with simulation of pending events and revert, using Graph's findMeetingTimes for availability
• OneDrive and SharePoint listing and reading, plus an Excel session with simulated edits (Word stays read-only at first, since .docx has no structured editing API)
• Teams chats and channels, with delegated scopes only, so no protected API approvals are needed

It follows the Confluence gatekeeper's handling of rotating refresh tokens, since Microsoft rotates them on every use. Everything is additive: one new package directory plus a dev credential entry in run-dev-server.js.

I know the contribution policy, and I'm not asking you to review a large PR cold. I'm asking whether you'd want this upstream at all, and if so, whether you'd like to shape the design before I write it. I'm happy to maintain the package either way. If upstream isn't the right home, I'll publish it as a standalone repo people can drop into their checkout, and a link from your README would do the rest.

[khalid-keyin]

I would like to see a gatekeeper for M365.

[swedeinasia-flow]

@markmusson - how did it go? Any repository to share so dont have to rebuild? Thank you

[markmusson]

Built and it definitely works, however I have abandoned the platform - it does not work for my use case...

[Pawooo]

@markmusson could you please describe your use case?

[jwillo]

Hi Mark, can you share your code? I would love to give it a run in my CFOS instance.

[twinprime19]

Try my fork:

https://github.com/twinprime19/cloudflare-os

Has Entra ID sign in, with the verified email taken from the ID token claims
Onboarding reads enterprise users profile avatar and full name so it's nice for them.
Outlook connection mail can read mails, read attachments.

It has other enhancements as well so pick what you need, or use it all. We're using this internally in our company for near zero cost with small testing group of about 10 users.

If you like it please drop a star.

[ndisidore]

Thank you for this! Sometime over the next week I'll take a peek at what you've done here it see what if any changes we would like to make to pull this into the main repo

[twinprime19]

This gatekeeper can read and process your emails for you, but it will only create Drafts. You will need to click send manually. FYI.

[ocdtrekkie]

I could probably make a case for Cloudflare OS at work, but first-party support for 365/Entra would almost certainly be an absolute must. Just commenting to add my support to the pile.