Microsoft Azure Active Directory

aid: microsoft-azure-active-directory
name: Microsoft Azure Active Directory
description: Microsoft Azure Active Directory (Azure AD), now Microsoft Entra ID, is Microsoft's cloud-based identity and
  access management service, which helps employees sign in and access resources.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://docs.microsoft.com/azure/media/index/active-directory.svg
url: https://raw.githubusercontent.com/api-evangelist/microsoft-azure-active-directory/refs/heads/main/apis.yml
created: '2024-01-15'
modified: '2026-05-19'
specificationVersion: '0.19'
tags:
- Authentication
- Authorization
- Identity
- Microsoft
- Microsoft Entra
- OAuth
- OpenID Connect
- SAML
- SCIM
- Single Sign-On
- Zero Trust
apis:
- name: Azure AD Graph API (Deprecated)
  description: Legacy API for accessing Azure AD (deprecated in favor of Microsoft Graph).
  humanURL: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-graph-api
  baseURL: https://graph.windows.net
  tags:
  - Deprecated
  - Identity
  - Legacy
  properties:
  - type: Documentation
    url: https://docs.microsoft.com/en-us/previous-versions/azure/ad/graph/api/api-catalog
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview
    title: Migration Guide
- name: Azure AD Authentication Library (ADAL)
  description: Authentication library for Azure AD (being replaced by MSAL).
  humanURL: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-authentication-libraries
  tags:
  - Authentication
  - Legacy
  - Library
  properties:
  - type: Documentation
    url: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-authentication-libraries
  - type: GitHubRepository
    url: https://github.com/AzureAD/azure-activedirectory-library-for-dotnet
- name: Microsoft Authentication Library (MSAL)
  description: Modern authentication library for Microsoft identity platform.
  humanURL: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-overview
  tags:
  - Authentication
  - Library
  - OAuth
  - OpenID Connect
  properties:
  - type: Documentation
    url: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-overview
  - type: GitHubRepository
    url: https://github.com/AzureAD/microsoft-authentication-library-for-js
    title: JavaScript SDK
  - type: CodeExamples
    url: https://docs.microsoft.com/en-us/azure/active-directory/develop/sample-v2-code
  - type: GitHubRepository
    url: https://github.com/AzureAD/microsoft-authentication-library-for-dotnet
    title: .NET SDK
  - type: GitHubRepository
    url: https://github.com/AzureAD/microsoft-authentication-library-for-python
    title: Python SDK
  - type: GitHubRepository
    url: https://github.com/AzureAD/microsoft-authentication-library-for-java
    title: Java SDK
  - type: GitHubRepository
    url: https://github.com/AzureAD/microsoft-authentication-library-for-objc
    title: iOS SDK
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/msal/
    title: MSAL Documentation
- name: Microsoft Identity Platform
  description: The Microsoft identity platform provides authentication and authorization services using standards-compliant
    implementations of OAuth 2.0 and OpenID Connect, enabling developers to build applications that sign in users and access
    secured APIs.
  humanURL: https://learn.microsoft.com/en-us/entra/identity-platform/
  baseURL: https://login.microsoftonline.com
  tags:
  - App Registration
  - Authentication
  - Authorization
  - OAuth
  - OpenID Connect
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/v2-protocols
    title: OAuth Documentation
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/v2-protocols-oidc
    title: OpenID Connect Documentation
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-auth-code-flow
    title: Authorization Code Flow
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app
    title: App Registration Guide
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/scopes-oidc
    title: Scopes and Permissions
  - type: CodeExamples
    url: https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-web-app-sign-in
- name: Microsoft Entra Verified ID API
  description: Microsoft Entra Verified ID is a managed verifiable credentials service that enables organizations to issue,
    manage, and verify decentralized identity credentials based on W3C standards.
  humanURL: https://learn.microsoft.com/en-us/entra/verified-id/
  baseURL: https://verifiedid.did.msidentity.com
  tags:
  - Decentralized Identity
  - Identity Verification
  - Verifiable Credentials
  - W3C
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/verified-id/
  - type: APIReference
    url: https://learn.microsoft.com/en-us/entra/verified-id/admin-api
    title: Admin API
  - type: APIReference
    url: https://learn.microsoft.com/en-us/entra/verified-id/vc-network-api
    title: Network API
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/verified-id/decentralized-identifier-overview
    title: Overview
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/entra/verified-id/verifiable-credentials-configure-tenant
- name: Microsoft Entra ID Governance API
  description: Microsoft Entra ID Governance APIs in Microsoft Graph enable automated access reviews, entitlement management,
    lifecycle workflows, and privileged identity management for identity governance scenarios.
  humanURL: https://learn.microsoft.com/en-us/entra/id-governance/identity-governance-overview
  baseURL: https://graph.microsoft.com
  tags:
  - Access Reviews
  - Entitlement Management
  - Governance
  - Lifecycle Workflows
  - Privileged Identity Management
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/id-governance/identity-governance-overview
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/id-governance/deploy-access-reviews
    title: Access Reviews
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/id-governance/lifecycle-workflows-deployment
    title: Lifecycle Workflows
  - type: Pricing
    url: https://learn.microsoft.com/en-us/entra/id-governance/licensing-fundamentals
- name: Microsoft Entra SCIM Provisioning API
  description: Microsoft Entra ID supports SCIM 2.0 protocol for automatic user and group provisioning to cloud applications,
    enabling automated identity lifecycle management through standardized REST APIs.
  humanURL: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/use-scim-to-provision-users-and-groups
  tags:
  - Automation
  - Group Management
  - Provisioning
  - SCIM
  - User Management
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/use-scim-to-provision-users-and-groups
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/architecture/sync-scim
    title: Architecture Guide
  - type: GitHubRepository
    url: https://github.com/azure-ad-b2c/rest-api
- name: Microsoft Entra PowerShell
  description: The Microsoft Entra PowerShell module provides cmdlets for managing Microsoft Entra resources programmatically,
    built on the Microsoft Graph PowerShell SDK.
  humanURL: https://learn.microsoft.com/en-us/powershell/entra-powershell/overview?view=entra-powershell
  tags:
  - Automation
  - CLI
  - PowerShell
  - Scripting
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/powershell/entra-powershell/?view=entra-powershell
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/powershell/entra-powershell/installation?view=entra-powershell
    title: Installation
  - type: GitHubRepository
    url: https://github.com/microsoftgraph/entra-powershell
- aid: microsoft-azure-active-directory:microsoft-azure-active-directory-applications-api
  name: Microsoft Azure Active Directory Applications API
  description: Manage application registrations in Azure Active Directory. An application object is the global representation
    of an application across all tenants, defining the app identity, access configuration, and capabilities.
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Applications
  properties:
  - type: OpenAPI
    url: openapi/microsoft-azure-active-directory-applications-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: Pricing
    url: https://azure.microsoft.com/en-us/pricing/details/active-directory/
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/use-the-api
  - type: Console
    url: https://developer.microsoft.com/en-us/graph/graph-explorer
  - type: ChangeLog
    url: https://learn.microsoft.com/en-us/graph/changelog
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccesspolicy?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/v2-conditional-access-dev-guide
  - type: JSONSchema
    url: json-schema/azure-active-directory-user-schema.json
  - type: JSONLD
    url: json-ld/azure-active-directory-context.jsonld
- aid: microsoft-azure-active-directory:microsoft-azure-active-directory-groups-api
  name: Microsoft Azure Active Directory Groups API
  description: Manage groups in Azure Active Directory. Groups can be security groups, Microsoft 365 groups, or mail-enabled
    security groups. They provide shared access to resources for a collection of users and other directory objects.
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Groups
  properties:
  - type: OpenAPI
    url: openapi/microsoft-azure-active-directory-groups-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: Pricing
    url: https://azure.microsoft.com/en-us/pricing/details/active-directory/
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/use-the-api
  - type: Console
    url: https://developer.microsoft.com/en-us/graph/graph-explorer
  - type: ChangeLog
    url: https://learn.microsoft.com/en-us/graph/changelog
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccesspolicy?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/v2-conditional-access-dev-guide
  - type: JSONSchema
    url: json-schema/azure-active-directory-user-schema.json
  - type: JSONLD
    url: json-ld/azure-active-directory-context.jsonld
- aid: microsoft-azure-active-directory:microsoft-azure-active-directory-service-principals-api
  name: Microsoft Azure Active Directory Service Principals API
  description: Manage service principals in Azure Active Directory. A service principal is the local representation of an
    application in a specific tenant. It defines what the application can do in the tenant, who can access it, and what resources
    it can access.
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Service Principals
  properties:
  - type: OpenAPI
    url: openapi/microsoft-azure-active-directory-service-principals-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: Pricing
    url: https://azure.microsoft.com/en-us/pricing/details/active-directory/
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/use-the-api
  - type: Console
    url: https://developer.microsoft.com/en-us/graph/graph-explorer
  - type: ChangeLog
    url: https://learn.microsoft.com/en-us/graph/changelog
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccesspolicy?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/v2-conditional-access-dev-guide
  - type: JSONSchema
    url: json-schema/azure-active-directory-user-schema.json
  - type: JSONLD
    url: json-ld/azure-active-directory-context.jsonld
- aid: microsoft-azure-active-directory:microsoft-azure-active-directory-users-api
  name: Microsoft Azure Active Directory Users API
  description: Manage user accounts in Azure Active Directory. Users are the core identity objects representing people in
    an organization. Each user has a profile with attributes such as display name, email, job title, and authentication credentials.
  humanURL: https://docs.microsoft.com/en-us/graph/overview
  baseURL: https://graph.microsoft.com
  tags:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/microsoft-azure-active-directory-users-api-openapi.yml
  - type: Documentation
    url: https://docs.microsoft.com/en-us/graph/api/overview
  - type: Authentication
    url: https://docs.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: Pricing
    url: https://azure.microsoft.com/en-us/pricing/details/active-directory/
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/use-the-api
  - type: Console
    url: https://developer.microsoft.com/en-us/graph/graph-explorer
  - type: ChangeLog
    url: https://learn.microsoft.com/en-us/graph/changelog
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccesspolicy?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview?view=graph-rest-1.0
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/v2-conditional-access-dev-guide
  - type: JSONSchema
    url: json-schema/azure-active-directory-user-schema.json
  - type: JSONLD
    url: json-ld/azure-active-directory-context.jsonld
maintainers:
- name: Microsoft
  email: azuread@microsoft.com
  url: https://azure.microsoft.com/en-us/services/active-directory/
- name: Kin Lane
  email: kin@apievangelist.com
  url: https://apievangelist.com
common:
- type: AgenticAccess
  url: agentic-access/microsoft-azure-active-directory-agentic-access.yml
- type: DomainSecurity
  url: security/microsoft-azure-active-directory-domain-security.yml
- type: Authentication
  url: authentication/microsoft-azure-active-directory-authentication.yml
- type: OAuthScopes
  url: scopes/microsoft-azure-active-directory-scopes.yml
- type: Portal
  url: https://portal.azure.com/
- type: StatusPage
  url: https://status.azure.com/
- type: Support
  url: https://azure.microsoft.com/en-us/support/
- type: Blog
  url: https://techcommunity.microsoft.com/t5/azure-active-directory/bg-p/Azure-Active-Directory
- type: TermsOfService
  url: https://azure.microsoft.com/en-us/support/legal/
- type: PrivacyPolicy
  url: https://privacy.microsoft.com/en-us/privacystatement
- type: Pricing
  url: https://azure.microsoft.com/en-us/pricing/details/active-directory/
- type: Training
  url: https://docs.microsoft.com/en-us/learn/azure/
- type: Portal
  url: https://entra.microsoft.com
  title: Entra Admin Center
- type: DeveloperPortal
  url: https://developer.microsoft.com/en-us/graph
- type: Blog
  url: https://devblogs.microsoft.com/identity/
  title: Identity Developer Blog
- url: https://devblogs.microsoft.com/identity/feed/
  type: BlogRSS
  description: Discovered RSS/Atom feed for https://devblogs.microsoft.com/identity/
- type: ReleaseNotes
  url: https://learn.microsoft.com/en-us/entra/fundamentals/whats-new
- type: Documentation
  url: https://learn.microsoft.com/en-us/entra/identity/
  title: Entra Documentation
- type: Console
  url: https://developer.microsoft.com/en-us/graph/graph-explorer
  title: Graph Explorer
- type: GitHubOrganization
  url: https://github.com/AzureAD
- type: OpenAPI
  url: openapi/microsoft-graph-identity-api.yml
- type: JSONSchema
  url: json-schema/azure-active-directory-user-schema.json
- type: JSONLD
  url: json-ld/azure-active-directory-context.jsonld
- type: Features
  data:
  - name: Single Sign-On
    description: Enable users to sign in once and access all connected applications without re-authenticating.
  - name: Conditional Access
    description: Enforce granular access policies based on user, device, location, and risk signals for zero trust security.
  - name: Multi-Factor Authentication
    description: Add a second layer of security with phone, app, or hardware token verification for identity protection.
  - name: SCIM User Provisioning
    description: Automate user and group lifecycle management across cloud applications using SCIM 2.0 standard.
  - name: Verifiable Credentials
    description: Issue and verify decentralized identity credentials based on W3C standards for privacy-preserving identity
      verification.
  - name: Identity Governance
    description: Automate access reviews, entitlement management, and lifecycle workflows for identity governance at scale.
  - name: Application Proxy
    description: Publish on-premises web applications externally with secure remote access without VPN infrastructure.
- type: UseCases
  data:
  - name: Enterprise SSO
    description: Implement single sign-on across SaaS and on-premises applications for seamless employee access management.
  - name: B2B Collaboration
    description: Enable secure collaboration with external partners and guests using Azure AD B2B identity federation.
  - name: Customer Identity
    description: Build customer-facing applications with self-service sign-up, social identity providers, and branded login
      experiences.
  - name: Zero Trust Security
    description: Implement zero trust architecture with conditional access policies, continuous access evaluation, and risk-based
      authentication.
  - name: Automated User Provisioning
    description: Automate user account creation, updates, and deprovisioning across connected SaaS applications using SCIM.
- type: Integrations
  data:
  - name: Microsoft 365
    description: Native identity provider for all Microsoft 365 applications including Teams, Outlook, SharePoint, and OneDrive.
  - name: Salesforce
    description: Single sign-on and automated user provisioning for Salesforce CRM using SAML and SCIM protocols.
  - name: ServiceNow
    description: Federated authentication and automated user lifecycle management for ServiceNow ITSM platform.
  - name: AWS
    description: Cross-cloud identity federation enabling Azure AD users to access AWS resources with single sign-on.
  - name: Workday
    description: HR-driven identity provisioning with automated user creation and attribute synchronization from Workday.
include:
- name: Microsoft Identity Platform
  url: https://docs.microsoft.com/en-us/azure/active-directory/develop/
- name: Azure AD B2C
  url: https://azure.microsoft.com/en-us/services/active-directory/external-identities/b2c/
- name: Azure AD B2B
  url: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/
- name: Microsoft Entra External ID
  url: https://learn.microsoft.com/en-us/entra/external-id/self-service-sign-up-secure-api-connector
- name: Microsoft Entra ID Protection
  url: https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-graph-api