Azure Active Directory

aid: azure-ad
name: Azure Active Directory
description: Microsoft's cloud-based identity and access management service that helps employees sign in and access resources.
  Azure AD provides OAuth, OpenID Connect, SAML, and other identity protocols for securing applications and managing user
  identities.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/azure-ad.png
tags:
- Authentication
- Authorization
- Identity
- OAuth
- OpenID Connect
- Single Sign-On
url: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/apis.yml
created: '2024-01-01'
modified: '2026-04-19'
specificationVersion: '0.19'
apis:
- aid: azure-ad:azure-ad-b2c-api
  name: Azure AD B2C API
  description: Business-to-consumer identity management solution.
  humanURL: https://docs.microsoft.com/en-us/azure/active-directory-b2c/
  baseURL: https://login.microsoftonline.com
  tags:
  - Authentication
  - B2C
  - Consumer Identity
  properties:
  - type: Documentation
    url: https://docs.microsoft.com/en-us/azure/active-directory-b2c/overview
- aid: azure-ad:azure-ad-applications-api
  name: Azure Active Directory Applications API
  description: Application registrations in Entra ID
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Applications
  properties:
  - type: OpenAPI
    url: openapi/azure-ad-applications-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: ChangeLog
    url: https://docs.microsoft.com/en-us/graph/changelog
- aid: azure-ad:azure-ad-directory-api
  name: Azure Active Directory Directory API
  description: Directory roles and objects
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Directory
  properties:
  - type: OpenAPI
    url: openapi/azure-ad-directory-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: ChangeLog
    url: https://docs.microsoft.com/en-us/graph/changelog
- aid: azure-ad:azure-ad-groups-api
  name: Azure Active Directory Groups API
  description: Microsoft 365 and security groups
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Groups
  properties:
  - type: OpenAPI
    url: openapi/azure-ad-groups-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: ChangeLog
    url: https://docs.microsoft.com/en-us/graph/changelog
- aid: azure-ad:azure-ad-me-api
  name: Azure Active Directory Me API
  description: Operations on the signed-in user
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Me
  properties:
  - type: OpenAPI
    url: openapi/azure-ad-me-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: ChangeLog
    url: https://docs.microsoft.com/en-us/graph/changelog
- aid: azure-ad:azure-ad-users-api
  name: Azure Active Directory Users API
  description: User accounts in the directory
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/azure-ad-users-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: ChangeLog
    url: https://docs.microsoft.com/en-us/graph/changelog
common:
- type: AgenticAccess
  url: agentic-access/azure-ad-agentic-access.yml
- type: DomainSecurity
  url: security/azure-ad-domain-security.yml
- type: Authentication
  url: authentication/azure-ad-authentication.yml
- type: OAuthScopes
  url: scopes/azure-ad-scopes.yml
- type: GitHubOrganization
  url: https://github.com/AzureAD
- type: Portal
  url: https://portal.azure.com
- type: Documentation
  url: https://learn.microsoft.com/en-us/azure/active-directory/
- type: StatusPage
  url: https://status.azure.com
- type: Blog
  url: https://techcommunity.microsoft.com/t5/azure-active-directory-identity/bg-p/Identity
- type: PrivacyPolicy
  url: https://privacy.microsoft.com/en-us/privacystatement
- type: TermsOfService
  url: https://azure.microsoft.com/en-us/support/legal/
- type: Pricing
  url: https://azure.microsoft.com/en-us/pricing/details/active-directory/
- type: GettingStarted
  url: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/get-started-azure-ad
- type: Features
  data:
  - name: Single Sign-On
    description: Enable users to sign in once and access all connected apps without re-authenticating.
  - name: Multi-Factor Authentication
    description: Enforce MFA to add an extra layer of security beyond passwords.
  - name: Conditional Access
    description: Define access policies based on user, device, location, and risk signals.
  - name: OAuth 2.0 and OpenID Connect
    description: Industry-standard protocols for authorization and authentication.
  - name: SAML 2.0 Support
    description: Federate with thousands of SAML-based SaaS applications.
  - name: Identity Protection
    description: Detect and respond to identity-based risks with AI-powered signals.
  - name: Privileged Identity Management
    description: Just-in-time privileged access with approval workflows and audit.
  - name: B2B Collaboration
    description: Invite external users from partner organizations to access your resources.
  - name: External Identities
    description: Enable customer and partner identity management with Azure AD B2C and B2B.
- type: UseCases
  data:
  - name: Enterprise SSO
    description: Provide single sign-on for employees across thousands of SaaS applications.
  - name: Zero Trust Security
    description: Implement zero trust architecture with identity as the control plane.
  - name: Consumer Identity
    description: Build customer-facing login with Azure AD B2C supporting social identities.
  - name: API Security
    description: Secure APIs with OAuth 2.0 tokens issued by Azure AD.
  - name: Hybrid Identity
    description: Extend on-premises Active Directory to the cloud with Azure AD Connect.
- type: Integrations
  data:
  - name: Microsoft 365
    description: Provides identity and access management for all Microsoft 365 applications.
  - name: Salesforce
    description: SAML-based SSO integration with Salesforce CRM and Platform.
  - name: ServiceNow
    description: Federated SSO and user provisioning for ServiceNow via SAML and SCIM.
  - name: GitHub Enterprise
    description: SAML SSO and SCIM provisioning for GitHub Enterprise organizations.
  - name: AWS
    description: Federate Azure AD with AWS IAM Identity Center for cross-cloud SSO.
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com