Set up Microsoft

For workforce SSO where a customer's IT admin owns the tenant and you want email-domain routing, use Microsoft Entra ID instead.

Copy the redirect URI

In the Authdog console, select the project and environment, open Authentication > Providers, find Microsoft, and click Enable. Copy the redirect URI:

https://identity.authdog.com/api/v1/callback/<connectionId>

Register the application

1. Open the Azure portal and go to Microsoft Entra ID > App registrations.
2. Select New registration.
3. Name the application.
4. Under Supported account types, choose Accounts in any organizational directory and personal Microsoft accounts unless you intend a single tenant.
5. Under Redirect URI, select Web and paste the redirect URI from Authdog.
6. Register, then copy the Application (client) ID.
7. Open Certificates & secrets, create a client secret, and copy the secret Value immediately. Azure hides it after you leave the page.

Configure Authdog

Save, then toggle the connection active.

Authdog uses the common endpoint and requests user.read, then reads the profile from Microsoft Graph /v1.0/me. A single-tenant registration refuses users outside that tenant even though the request reaches Microsoft.

Test it

1. Open hosted sign-in, or https://identity.authdog.com/api/v1/signin/<connectionId>.
2. Select Continue with Microsoft.
3. Test a personal account and a work account if your audience covers both.
4. Confirm the user appears under Users.

Troubleshooting

Related