I did a search and found one page in the manual site but nothing in the forums. I have seen many external vendors who charge for building these plug-ins, but not much guidance for writing on our own dev team.

Are there any good resources for how we can write a plug-in to use our enterprise Azure AD SSO as the web auth plug-in to LimeSurvey?

What is the best practice for writing/storing this code so that it is not broken by any ComfortUpdates?

Thanks.

You are lucky
www.limesurvey.org/manual/Plugin_events#...ation_related_events
www.limesurvey.org/manual/Authentication_plugins
www.limesurvey.org/manual/Available_thir...thentication_plugins

Follow up:
We ended up using one of the SAML plugins. Since LimeSurvey is written in PHP and has plug-in based options, similar to WordPress customizations that we have, we utilized a similar Azure AD SAML solution to get this to work. We had to modify our return or redirect URI coming out of Azure to work with the SAML plugin, but then it worked fine without having to write our own custom plugin for Azure AD.

What SAML plugin did you use ? It's a public plugin or an hidden one ?