# Microsoft Azure Active Directory

**Canonical:** https://apis.io/providers/microsoft-azure-active-directory/  
**Website:** https://developer.microsoft.com/en-us/graph  
**APIs profiled:** 12

Microsoft Azure Active Directory (Azure AD), now Microsoft Entra ID, is Microsoft's cloud-based identity and access management service, which helps employees sign in and access resources.

## Kin Score — 50.4 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 50.4).

| Facet | Score |
|---|---|
| Discoverability | 55.6 |
| Contract Quality | 77.1 |
| Governance | 30.3 |
| Contract Governance | 30.3 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 45.2 |
| Commercial Clarity | 47.4 |
| Access Clarity | 47.4 |

## Agent readiness — 38.0 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | verified |
| Rate Limit Signal | verified |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (12)

- **Azure AD Graph API (Deprecated)** — Legacy API for accessing Azure AD (deprecated in favor of Microsoft Graph).
- **Azure AD Authentication Library (ADAL)** — Authentication library for Azure AD (being replaced by MSAL).
- **Microsoft Authentication Library (MSAL)** — Modern authentication library for Microsoft identity platform.
- **Microsoft Identity Platform** — The Microsoft identity platform provides authentication and authorization services using standards-compliant implementations of OAuth 2.0 and OpenID Connect, enabling developers...
- **Microsoft Entra Verified ID API** — Microsoft Entra Verified ID is a managed verifiable credentials service that enables organizations to issue, manage, and verify decentralized identity credentials based on W3C s...
- **Microsoft Entra ID Governance API** — Microsoft Entra ID Governance APIs in Microsoft Graph enable automated access reviews, entitlement management, lifecycle workflows, and privileged identity management for identi...
- **Microsoft Entra SCIM Provisioning API** — Microsoft Entra ID supports SCIM 2.0 protocol for automatic user and group provisioning to cloud applications, enabling automated identity lifecycle management through standardi...
- **Microsoft Entra PowerShell** — The Microsoft Entra PowerShell module provides cmdlets for managing Microsoft Entra resources programmatically, built on the Microsoft Graph PowerShell SDK.
- **Microsoft Azure Active Directory Applications API** — Manage application registrations in Azure Active Directory. An application object is the global representation of an application across all tenants, defining the app identity, a...
- **Microsoft Azure Active Directory Groups API** — Manage groups in Azure Active Directory. Groups can be security groups, Microsoft 365 groups, or mail-enabled security groups. They provide shared access to resources for a coll...
- **Microsoft Azure Active Directory Service Principals API** — Manage service principals in Azure Active Directory. A service principal is the local representation of an application in a specific tenant. It defines what the application can ...
- **Microsoft Azure Active Directory Users API** — Manage user accounts in Azure Active Directory. Users are the core identity objects representing people in an organization. Each user has a profile with attributes such as displ...

## Agentic access (1)

- **Microsoft Azure Active Directory Agentic Access** — 24 operations · 13 acting

## Security (2)

- **Microsoft Azure Active Directory Authentication** — oauth2 · 1 scheme
- **Microsoft Azure Active Directory Domain Security** — TLSv1.3 · HSTS · DMARC

## Plans (2)

- **Azure Active Directory Plans Pricing**
- **Microsoft Azure Active Directory Plans Pricing**

## Use cases (5)

- **Enterprise SSO** — Implement single sign-on across SaaS and on-premises applications for seamless employee access management.
- **B2B Collaboration** — Enable secure collaboration with external partners and guests using Azure AD B2B identity federation.
- **Customer Identity** — Build customer-facing applications with self-service sign-up, social identity providers, and branded login experiences.
- **Zero Trust Security** — Implement zero trust architecture with conditional access policies, continuous access evaluation, and risk-based authentication.
- **Automated User Provisioning** — Automate user account creation, updates, and deprovisioning across connected SaaS applications using SCIM.

## Tags

Authentication, Authorization, Identity, Microsoft, Microsoft Entra, OpenID Connect, SAML, SCIM, Single Sign-On, Zero Trust

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/microsoft-azure-active-directory/). Scores are computed from the provider's own public artifacts under a published rubric.