Microsoft Entra

Microsoft Entra (formerly Azure Active Directory) provides identity and access management services including authentication, authorization, and directory services.

Microsoft Entra publishes 17 APIs on the APIs.io network, including Applications API, Groups API, Users API, and 14 more. Tagged areas include Access Management, Authentication, Azure AD, Entra, and Identity.

The Microsoft Entra catalog on APIs.io includes 2 JSON-LD contexts and 2 Spectral governance rulesets.

Microsoft Entra’s developer surface includes authentication, developer portal, getting-started guide, engineering blog, support, changelog, pricing, and 33 more developer resources.

🌐 Visit website 📡 Source on GitHub

58.5/100 strong ▬ flat Agent 25/100 agent aware saas Full breakdown ↓
scored 2026-09-25 · rubric v0.23.0

AccessFreemiumSelf serve⚡ Free to try

1 APIs 8 Features 5 Use Cases

Access Management AuthenticationAzure ADEntraIdentity Identity Governance Microsoft Network Security Security Zero Trust Identity Federation

What this lets a business do 1

Business capabilities this provider's published APIs can perform, derived from its own contracts. Browse all capabilities →

Cybersecurity Management

BC-620

ApplicationsGroupsServicePrincipalsUsers

POST /servicePrincipals POST /servicePrincipals/{servicePrincipal-id}/appRoleAssignments POST /applications POST /applications/{application-id}/addPassword

Kin Score

Kin Score How this is scored →
scored 2026-09-25 · rubric v0.23.0

Composite quality — 58.5/100 · strong

Contract Quality 11.8 / 19

Developer Ergonomics 9.8 / 15

Access Clarity 10.7 / 15

Operational Transparency 3.3 / 10

Contract Governance 1.2 / 9

Discoverability 4.8 / 8

Regulatory Posture 6.0 / 15

Create-or-Update Ergonomics 0.0 / 10

Agent readiness — 25/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 6 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

The six quality facets above are damped to 75 points between them, because the conditional facet above carries the other 25. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 75% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/microsoft-entra: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Microsoft Entra External ID is an area vendor: providers adopt it to run part of their developer surface. This is the Kin Score checks its features can move for a provider that adopts it, what each one really earns, and what it earns nothing for.

identitycapability map4 features checked 2026-09-25 · rubric v0.22.0

Entra External ID lifts almost nothing on the identity dimensions as the rubric reads them today. Its discovery documents live under a tenant path, not at a host root, so a provider using a custom URL domain still is not read as serving discovery; it can earn the OpenAPI fallback tiers only by declaring OAuth in its own contract. There is no dynamic client registration (Microsoft says so for MCP), and no protected-resource metadata. Hosted user flows give a sign-up page the provider can declare.

Access Clarity5.0 of 38 pts

Agent Readiness10.5 of 139 pts

Regulatory6.0 of 108 pts

Check	Earns	Through
Machine-Readable Authpartial Agent ReadinessThe served tier reads a root /.well-known/openid-configuration on a provider host; Entra’s is under //v2.0/, which the root-only harvest never requests. Only the OpenAPI fallback is reachable.	7.5 of 10	Tenant-scoped OIDC discovery
Delegated User Identitypartial Agent ReadinessSame tenant-path reason; the documented tier reads an authorizationCode flow or openIdConnect in the provider’s OpenAPI.	3.0 of 6	Tenant-scoped OIDC discovery
Self-service sign-up Access ClarityDeclare the user-flow sign-up URL as a Login or SignUp pointer in apis.yml.	5.0 of 5	Sign-up and sign-in user flows
FAPI / hardened authorization profileconditional RegulatoryBanking/open-finance regime only, and only if the provider’s own auth documentation states it uses private_key_jwt or certificate-bound client authentication.	6.0 of 6	Tenant-scoped OIDC discovery

Across 8977 providers that publish a contract, adopting Microsoft Entra External ID would move 8268. Median lift: composite +2.4 (90th percentile +2.7), agent readiness +5.0 (+5.9). Conditional rows excluded.

What Microsoft Entra External ID ships that earns nothing (2)

Custom URL domains — A custom URL domain puts discovery on the provider’s host but still under //v2.0/, so it reads exactly as the ciamlogin.com default does.
Tenant-scoped OIDC discovery — openid-configuration is not one of the well-known documents that check reads.

A model, not a score. Adopting this vendor changes a provider's Kin Score only when the provider publishes the resulting artifacts on its own surface; nothing here writes a score, and no sponsorship or partnership can. The rating is not for sale → · Full vendor facets artifact

Standards implemented 1

Interfaces this provider implements that became standards by being copied rather than ratified. Each is profiled by the API Commons, and the evidence column says how the claim was established — not that it was made.

SCIM 2.0

prose — states compatibility; nothing published to check it against

5 core of 24 operations graded · api-commons/identity

APIs 17

Individual APIs this provider publishes, each with its own machine-readable definition.

Microsoft Entra ID Protection API

API for identity risk detection, investigation, and remediation.

Microsoft Entra Conditional Access API

API for managing conditional access policies and controls.

Microsoft Entra Privileged Identity Management API

API for managing privileged access and just-in-time administration.

Microsoft Entra Verified ID API

API for issuing and verifying decentralized identity credentials.

Microsoft Entra External ID API

API for managing customer and partner identity and access management.

Microsoft Entra ID Governance API

API for managing identity governance including access reviews, entitlement management, and lifecycle workflows to ensure the right people have the right access at the right time.

Microsoft Entra Application Management API

API for registering, configuring, and managing applications and service principals in Microsoft Entra ID.

Microsoft Entra Authentication Methods API

API for managing user authentication methods including FIDO2 security keys, passwordless phone sign-in, Microsoft Authenticator, and MFA registration.

Microsoft Entra Workload ID API

API for managing and securing identities for software workloads such as applications, services, scripts, and containers.

Microsoft Entra Provisioning API

API for automating user provisioning and deprovisioning using SCIM protocol, including API-driven inbound provisioning from any system of record.

Microsoft Entra Global Secure Access API

API for managing Microsoft Entra Internet Access and Microsoft Entra Private Access, providing identity-centric secure web gateway and zero-trust network access.

Microsoft Identity Platform API

API endpoints for OAuth 2.0, OpenID Connect, and SAML authentication protocols enabling application integration with Microsoft Entra ID.

Microsoft Entra Agent ID API

API for creating, securing, and monitoring AI agent identities, providing authentication, authorization, and lifecycle management for AI agents.

Microsoft Entra Applications API

Register and manage application objects that define application configuration including credentials, permissions, and sign-in settings

Microsoft Entra Groups API

Manage groups for organizing users, devices, and other principals including Microsoft 365 groups, security groups, and distribution lists

Microsoft Entra Users API

Manage user accounts in the directory including creation, updates, profile management, and lifecycle operations

Microsoft Entra Service Principals API

Manage service principal objects that represent application instances in a tenant for authentication and authorization

Scroll for all 17

Postman Collections 1

Ready-to-run Postman collections for exercising this provider's APIs.

Microsoft Entra Microsoft Graph Identity API

POSTMAN

Open Collections 6

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

Microsoft Entra Microsoft Graph Identity Applications API

OPEN COLLECTION

Microsoft Entra Microsoft Graph Identity API

OPEN COLLECTION

Microsoft Entra Microsoft Graph Identity Applications Groups API

OPEN COLLECTION

Microsoft Entra Microsoft Graph Identity Applications ServicePrincipals API

OPEN COLLECTION

Microsoft Entra Microsoft Graph Identity Applications Users API

OPEN COLLECTION

Arazzo Workflows 14

Multi-step API workflows described with the Arazzo specification.

Microsoft Entra Audit User Memberships

Find a user by UPN, read its profile, and list its group memberships.

ARAZZO

Microsoft Entra Create Group With Member

Create a security group, add a member, and list its members.

ARAZZO

Microsoft Entra Create Microsoft 365 Group With Member

Create a Unified M365 group, add a member, and read the group back.

ARAZZO

Microsoft Entra Decommission Application

Find a service principal by appId, delete it, then delete the app.

ARAZZO

Microsoft Entra Deprovision User

Disable a user account, then delete the user from the directory.

ARAZZO

Microsoft Entra Find And Update Application

Find an app by appId, update its display name, and read it back.

ARAZZO

Microsoft Entra Find And Update Group

Find a group by display name, update it, and read it back.

ARAZZO

Microsoft Entra Find And Update User

Find a user by UPN, update its profile, and read the result.

ARAZZO

Microsoft Entra Grant App Role Assignment

Grant an app role to a service principal then list its assignments.

ARAZZO

Microsoft Entra Offboard User From Group

Find a user by UPN, remove it from a group, and verify removal.

ARAZZO

Microsoft Entra Onboard User To Group

Create a user, add it to an existing group, and confirm membership.

ARAZZO

Microsoft Entra Provision User

Create a new Entra ID user and read back the provisioned account.

ARAZZO

Microsoft Entra Register Application With Service Principal

Create an app registration then instantiate its service principal.

ARAZZO

Microsoft Entra Rotate Application Secret

Add a fresh client secret to an app, then remove the old one.

ARAZZO

Scroll for all 14

Pricing Plans 2

Published pricing tiers and plan structures.

Microsoft Entra Plans Pricing

11 plans

PLANS

Microsoft Entra Price Estimates

0 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Microsoft Entra Rate Limits

0 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Microsoft Entra Finops

FINOPS

Features 8

Notable capabilities this provider offers.

Identity and Access Management

Manage user identities, authentication, and authorization across cloud and hybrid environments with single sign-on.

Conditional Access

Enforce adaptive access policies based on user, device, location, and risk signals for zero trust security.

Identity Governance

Automate access reviews, entitlement management, and lifecycle workflows to ensure proper access controls.

Privileged Identity Management

Manage, control, and monitor privileged access with just-in-time and approval-based activation.

Verified ID

Issue and verify decentralized identity credentials using open standards for portable, self-sovereign identity.

External Identities

Enable secure collaboration with external partners and customers through B2B and B2C identity management.

Global Secure Access

Provide identity-centric secure web gateway and zero-trust network access for internet and private resources.

Workload Identities

Secure and manage identities for applications, services, scripts, and containers running as software workloads.

Scroll for all 8

Semantic Vocabularies 2

JSON-LD contexts and semantic vocabularies used across these APIs.

Microsoft Entra Context

0 classes · 5 properties

JSON-LD

Microsoft Entra Graph Identity Context

0 classes · 0 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Microsoft Entra API Rules

6 rules · 4 warnings 2 info

SPECTRAL

Microsoft Entra API Rules

17 rules · 8 errors 8 warnings 1 info

SPECTRAL

JSON Schema 48

Standalone JSON Schema definitions for this provider's data models.

ApiApplication

5 properties

JSON SCHEMA

Microsoft Entra Application

24 properties

JSON SCHEMA

ApplicationCollectionResponse

4 properties

JSON SCHEMA

AppRole

6 properties

JSON SCHEMA

AppRoleAssignment

8 properties

JSON SCHEMA

AppRoleAssignmentCollectionResponse

4 properties

JSON SCHEMA

AssignedLicense

2 properties

JSON SCHEMA

DirectoryObject

3 properties

JSON SCHEMA

DirectoryObjectCollectionResponse

4 properties

JSON SCHEMA

ApiApplication

5 properties

JSON SCHEMA

AppRoleAssignmentCollectionResponse

4 properties

JSON SCHEMA

AppRoleAssignment

8 properties

JSON SCHEMA

AppRole

6 properties

JSON SCHEMA

ApplicationCollectionResponse

4 properties

JSON SCHEMA

Application

13 properties

JSON SCHEMA

AssignedLicense

2 properties

JSON SCHEMA

DirectoryObjectCollectionResponse

4 properties

JSON SCHEMA

DirectoryObject

3 properties

JSON SCHEMA

GroupCollectionResponse

4 properties

JSON SCHEMA

Group

18 properties

JSON SCHEMA

KeyCredential

7 properties

JSON SCHEMA

ODataError

1 properties

JSON SCHEMA

ODataReference

1 properties

JSON SCHEMA

PasswordCredential

6 properties

JSON SCHEMA

PasswordProfile

3 properties

JSON SCHEMA

PermissionScope

8 properties

JSON SCHEMA

RequiredResourceAccess

2 properties

JSON SCHEMA

ServicePrincipalCollectionResponse

4 properties

JSON SCHEMA

ServicePrincipal

20 properties

JSON SCHEMA

SpaApplication

1 properties

JSON SCHEMA

UserCollectionResponse

4 properties

JSON SCHEMA

User

31 properties

JSON SCHEMA

WebApplication

4 properties

JSON SCHEMA

Group

18 properties

JSON SCHEMA

GroupCollectionResponse

4 properties

JSON SCHEMA

KeyCredential

7 properties

JSON SCHEMA

ODataError

1 properties

JSON SCHEMA

ODataReference

1 properties

JSON SCHEMA

PasswordCredential

6 properties

JSON SCHEMA

PasswordProfile

3 properties

JSON SCHEMA

PermissionScope

8 properties

JSON SCHEMA

RequiredResourceAccess

2 properties

JSON SCHEMA

ServicePrincipal

20 properties

JSON SCHEMA

ServicePrincipalCollectionResponse

4 properties

JSON SCHEMA

SpaApplication

1 properties

JSON SCHEMA

Microsoft Entra User

39 properties

JSON SCHEMA

UserCollectionResponse

4 properties

JSON SCHEMA

WebApplication

4 properties

JSON SCHEMA

Scroll for all 48

JSON Structure 25

JSON Structure definitions describing this provider's data shapes.

Microsoft Entra Graph Identity Api Application Structure

5 properties

JSON STRUCTURE

Microsoft Entra Graph Identity App Role Assignment Collection Response Structure

4 properties

JSON STRUCTURE

Microsoft Entra Graph Identity App Role Assignment Structure

8 properties

JSON STRUCTURE

Microsoft Entra Graph Identity App Role Structure

6 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Application Collection Response Structure

4 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Application Structure

13 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Assigned License Structure

2 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Directory Object Collection Response Structure

4 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Directory Object Structure

3 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Group Collection Response Structure

4 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Group Structure

18 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Key Credential Structure

7 properties

JSON STRUCTURE

Microsoft Entra Graph Identity O Data Error Structure

1 properties

JSON STRUCTURE

Microsoft Entra Graph Identity O Data Reference Structure

1 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Password Credential Structure

6 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Password Profile Structure

3 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Permission Scope Structure

8 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Required Resource Access Structure

2 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Service Principal Collection Response Structure

4 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Service Principal Structure

20 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Spa Application Structure

1 properties

JSON STRUCTURE

Microsoft Entra Graph Identity User Collection Response Structure

4 properties

JSON STRUCTURE

Microsoft Entra Graph Identity User Structure

31 properties

JSON STRUCTURE

Microsoft Entra Graph Identity Web Application Structure

4 properties

JSON STRUCTURE

Microsoft Entra Structure

0 properties

JSON STRUCTURE

Scroll for all 25

Examples 24

Example request and response payloads for these APIs.

Microsoft Entra Graph Identity Api Application Example

5 fields

EXAMPLE

Microsoft Entra Graph Identity App Role Assignment Collection Response Example

4 fields

EXAMPLE

Microsoft Entra Graph Identity App Role Assignment Example

8 fields

EXAMPLE

Microsoft Entra Graph Identity App Role Example

6 fields

EXAMPLE

Microsoft Entra Graph Identity Application Collection Response Example

4 fields

EXAMPLE

Microsoft Entra Graph Identity Application Example

13 fields

EXAMPLE

Microsoft Entra Graph Identity Assigned License Example

2 fields

EXAMPLE

Microsoft Entra Graph Identity Directory Object Collection Response Example

4 fields

EXAMPLE

Microsoft Entra Graph Identity Directory Object Example

3 fields

EXAMPLE

Microsoft Entra Graph Identity Group Collection Response Example

4 fields

EXAMPLE

Microsoft Entra Graph Identity Group Example

18 fields

EXAMPLE

Microsoft Entra Graph Identity Key Credential Example

7 fields

EXAMPLE

Microsoft Entra Graph Identity O Data Error Example

1 fields

EXAMPLE

Microsoft Entra Graph Identity O Data Reference Example

1 fields

EXAMPLE

Microsoft Entra Graph Identity Password Credential Example

6 fields

EXAMPLE

Microsoft Entra Graph Identity Password Profile Example

3 fields

EXAMPLE

Microsoft Entra Graph Identity Permission Scope Example

8 fields

EXAMPLE

Microsoft Entra Graph Identity Required Resource Access Example

2 fields

EXAMPLE

Microsoft Entra Graph Identity Service Principal Collection Response Example

4 fields

EXAMPLE

Microsoft Entra Graph Identity Service Principal Example

20 fields

EXAMPLE

Microsoft Entra Graph Identity Spa Application Example

1 fields

EXAMPLE

Microsoft Entra Graph Identity User Collection Response Example

4 fields

EXAMPLE

Microsoft Entra Graph Identity User Example

31 fields

EXAMPLE

Microsoft Entra Graph Identity Web Application Example

4 fields

EXAMPLE

Scroll for all 24

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Microsoft Entra Authentication

oauth2 · 1 scheme

SECURITY

Microsoft Entra Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Microsoft Entra Vulnerability Disclosure

security.txt · contact published

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Microsoft Entra Scopes

13 scopes · authorizationCode/clientCredentials

13 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Microsoft Entra Agentic Access

28 operations · 17 acting

AGENTIC

Use Cases 5

What developers build with this provider.

Zero Trust Implementation

Implement zero trust architecture with identity-based access controls, conditional access policies, and continuous verification.

Hybrid Identity Management

Synchronize and manage identities across on-premises Active Directory and cloud environments.

Application Single Sign-On

Enable SSO for thousands of SaaS and on-premises applications with SAML, OIDC, and password-based authentication.

Automated User Provisioning

Automate user lifecycle management with SCIM-based provisioning and deprovisioning across integrated applications.

AI Agent Identity Management

Create, secure, and monitor identities for AI agents with authentication, authorization, and lifecycle management.

Integrations 8

Pre-built integrations with other platforms and tools.

Microsoft 365

Deep integration for identity and access management across all Microsoft 365 applications and services.

Azure Services

Native identity provider for Azure resources including VMs, databases, storage, and managed identities.

Active Directory

Hybrid identity synchronization with on-premises Active Directory using Azure AD Connect.

Salesforce

SAML and SCIM integration for single sign-on and automated user provisioning with Salesforce.

ServiceNow

SSO and automated provisioning integration with ServiceNow ITSM platform.

Workday

Inbound provisioning from Workday HR to automate user lifecycle management.

SAP

SSO and provisioning integration with SAP applications and S/4HANA.

Okta

Cross-platform identity federation and migration support with Okta identity provider.

Scroll for all 8

Resources

Get Started 2

Portal, sign-up, and the first successful call

Portal

Portal

GettingStarted

GettingStarted

Documentation 2

Reference material describing how the API behaves

JSONSchema

JSONSchema

JSONSchema

JSONSchema

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Design & Contract 15

Pagination, idempotency, versioning, errors, and events

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

Arazzo

JSONLD

Scroll for all 15

Build 3

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace

PostmanWorkspace

SDKs

SDKs

GitHubOrganization

GitHubOrganization

Access & Security 5

Authentication, authorization, and security posture

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

Authentication

OAuthScopes

Authentication

Operate 4

Status, limits, changes, and where to get help

RateLimits

Support

StatusPage

ChangeLog

Commercial 4

Pricing, plans, and the legal terms of use

Plans

TermsOfService

PrivacyPolicy

Pricing

Company 2

The organization behind the API

Website

Website

Blog

Blog

Other 2

Properties that don't map to a standard resource type

VendorFacets

VendorFacets

CapabilityMap

CapabilityMap

Source (apis.yml)

aid: microsoft-entra
name: Microsoft Entra
description: Microsoft Entra (formerly Azure Active Directory) provides identity and access management services including
  authentication, authorization, and directory services.
url: https://learn.microsoft.com/en-us/entra/fundamentals/
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: true
  label: Hosted service · you call their endpoint
  confidence: high
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://www.microsoft.com/en-us/security/content/dam/microsoft/final/security/includes/microsoft-entra-logo.svg
created: '2024-01-01'
modified: '2026-09-16'
specificationVersion: '0.23'
type: Index
access: 3rd-Party
tags:
- Access Management
- Authentication
- Azure AD
- Entra
- Identity
- Identity Governance
- Microsoft
- Network Security
- Security
- Zero Trust
- Identity Federation
apis:
- aid: microsoft-entra:id-protection
  name: Microsoft Entra ID Protection API
  description: API for identity risk detection, investigation, and remediation.
  humanURL: https://learn.microsoft.com/en-us/graph/api/resources/identityprotection-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Identity Protection
  - Risk Detection
  - Security
  - Threat Protection
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/id-protection/
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/identityprotectionroot
- aid: microsoft-entra:conditional-access
  name: Microsoft Entra Conditional Access API
  description: API for managing conditional access policies and controls.
  humanURL: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccessroot
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Access Control
  - Conditional Access
  - Policies
  - Security
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity/conditional-access/
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccessroot
- aid: microsoft-entra:pim
  name: Microsoft Entra Privileged Identity Management API
  description: API for managing privileged access and just-in-time administration.
  humanURL: https://learn.microsoft.com/en-us/graph/api/resources/privilegedidentitymanagementv3-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Just-In-Time
  - Product Information Management
  - Privileged Access
  - Role Management
  tags_raw:
  - Just-In-Time
  - PIM
  - Privileged Access
  - Role Management
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/privilegedidentitymanagementv3-overview
- aid: microsoft-entra:verified-id
  name: Microsoft Entra Verified ID API
  description: API for issuing and verifying decentralized identity credentials.
  humanURL: https://learn.microsoft.com/en-us/entra/verified-id/
  baseURL: https://verifiedid.did.msidentity.com/v1.0
  tags:
  - Decentralized Identity
  - DID
  - SSI
  - Verifiable Credentials
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/verified-id/verifiable-credentials-configure-tenant
  - type: APIReference
    url: https://learn.microsoft.com/en-us/entra/verified-id/get-started-request-api
- aid: microsoft-entra:external-id
  name: Microsoft Entra External ID API
  description: API for managing customer and partner identity and access management.
  humanURL: https://learn.microsoft.com/en-us/entra/external-id/
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - B2B
  - Consumer
  - Customer Identity
  - External Identities
  tags_raw:
  - B2B
  - B2C
  - Customer Identity
  - External Identities
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/external-id/external-identities-overview
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview
- aid: microsoft-entra:id-governance
  name: Microsoft Entra ID Governance API
  description: API for managing identity governance including access reviews, entitlement management, and lifecycle workflows
    to ensure the right people have the right access at the right time.
  humanURL: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Access Reviews
  - Compliance
  - Entitlement Management
  - Identity Governance
  - Lifecycle Workflows
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/id-governance/identity-governance-overview
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/tutorial-access-package-api
- aid: microsoft-entra:application-management
  name: Microsoft Entra Application Management API
  description: API for registering, configuring, and managing applications and service principals in Microsoft Entra ID.
  humanURL: https://learn.microsoft.com/en-us/graph/applications-concept-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - App Registration
  - Application
  - Credentials
  - Authentication
  - Service Principals
  tags_raw:
  - App Registration
  - Applications
  - Credentials
  - OAuth
  - Service Principals
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/tutorial-applications-basics
- aid: microsoft-entra:authentication-methods
  name: Microsoft Entra Authentication Methods API
  description: API for managing user authentication methods including FIDO2 security keys, passwordless phone sign-in, Microsoft
    Authenticator, and MFA registration.
  humanURL: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethods-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Authentication Methods
  - FIDO2
  - MFA
  - Passkeys
  - Passwordless
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-methods
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethods-overview
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/authenticationmethods-get-started
- aid: microsoft-entra:workload-id
  name: Microsoft Entra Workload ID API
  description: API for managing and securing identities for software workloads such as applications, services, scripts, and
    containers.
  humanURL: https://learn.microsoft.com/en-us/entra/workload-id/
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Managed Identities
  - Service Principals
  - Workload Identities
  - Workload Identity Federation
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/workload-id/workload-identities-overview
- aid: microsoft-entra:provisioning
  name: Microsoft Entra Provisioning API
  description: API for automating user provisioning and deprovisioning using SCIM protocol, including API-driven inbound provisioning
    from any system of record.
  humanURL: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/inbound-provisioning-api-concepts
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Inbound Provisioning
  - Provisioning
  - SCIM
  - Synchronization
  - User Lifecycle
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/how-provisioning-works
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/synchronization-overview
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/inbound-provisioning-api-configure-app
- aid: microsoft-entra:global-secure-access
  name: Microsoft Entra Global Secure Access API
  description: API for managing Microsoft Entra Internet Access and Microsoft Entra Private Access, providing identity-centric
    secure web gateway and zero-trust network access.
  humanURL: https://learn.microsoft.com/en-us/entra/global-secure-access/overview-what-is-global-secure-access
  baseURL: https://graph.microsoft.com/beta
  tags:
  - Internet Access
  - Network Security
  - Private Access
  - Secure Web Gateway
  - Zero Trust
  - ZTNA
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/global-secure-access/
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/networkaccess-global-secure-access-api-overview
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/tutorial-entra-private-access
- aid: microsoft-entra:identity-platform
  name: Microsoft Identity Platform API
  description: API endpoints for OAuth 2.0, OpenID Connect, and SAML authentication protocols enabling application integration
    with Microsoft Entra ID.
  humanURL: https://learn.microsoft.com/en-us/entra/identity-platform/
  baseURL: https://login.microsoftonline.com
  tags:
  - Identity Platform
  - Authentication
  - OpenID Connect
  - SAML
  - Token Service
  tags_raw:
  - Identity Platform
  - OAuth 2.0
  - OpenID Connect
  - SAML
  - Token Service
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity-platform/
  - type: APIReference
    url: https://learn.microsoft.com/en-us/entra/identity-platform/v2-protocols
- aid: microsoft-entra:agent-id
  name: Microsoft Entra Agent ID API
  description: API for creating, securing, and monitoring AI agent identities, providing authentication, authorization, and
    lifecycle management for AI agents.
  humanURL: https://learn.microsoft.com/en-us/graph/api/resources/agentid-platform-overview
  baseURL: https://graph.microsoft.com/beta
  tags:
  - Agent Identity
  - Agent Registry
  - AI Agents
  - Machine Identity
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/graph/api/resources/agentid-platform-overview
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/interactive-agent-request-user-tokens
- aid: microsoft-entra:microsoft-entra-applications-api
  name: Microsoft Entra Applications API
  description: Register and manage application objects that define application configuration including credentials, permissions,
    and sign-in settings
  humanURL: https://learn.microsoft.com/en-us/graph/azuread-identity-access-management-concept-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Application
  tags_raw:
  - Applications
  properties:
  - type: OpenAPI
    url: openapi/microsoft-entra-applications-api-openapi.yml
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity/
  - type: Authentication
    url: https://learn.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: Pricing
    url: https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/tutorial-applications-basics
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview
- aid: microsoft-entra:microsoft-entra-groups-api
  name: Microsoft Entra Groups API
  description: Manage groups for organizing users, devices, and other principals including Microsoft 365 groups, security
    groups, and distribution lists
  humanURL: https://learn.microsoft.com/en-us/graph/azuread-identity-access-management-concept-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Group
  tags_raw:
  - Groups
  properties:
  - type: OpenAPI
    url: openapi/microsoft-entra-groups-api-openapi.yml
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity/
  - type: Authentication
    url: https://learn.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: Pricing
    url: https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/tutorial-applications-basics
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview
- aid: microsoft-entra:microsoft-entra-users-api
  name: Microsoft Entra Users API
  description: Manage user accounts in the directory including creation, updates, profile management, and lifecycle operations
  humanURL: https://learn.microsoft.com/en-us/graph/azuread-identity-access-management-concept-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - User
  tags_raw:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/microsoft-entra-users-api-openapi.yml
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity/
  - type: Authentication
    url: https://learn.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: Pricing
    url: https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/tutorial-applications-basics
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview
- aid: microsoft-entra:microsoft-entra-service-principals-api
  name: Microsoft Entra Service Principals API
  description: Manage service principal objects that represent application instances in a tenant for authentication and authorization
  humanURL: https://learn.microsoft.com/en-us/graph/api/resources/identityprotection-overview
  baseURL: https://graph.microsoft.com/v1.0
  tags:
  - Service Principals
  properties:
  - type: OpenAPI
    url: openapi/microsoft-entra-service-principals-api-openapi.yml
  - type: Documentation
    url: https://learn.microsoft.com/en-us/entra/identity/
  - type: Authentication
    url: https://learn.microsoft.com/en-us/graph/auth/
  - type: SDKs
    url: https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
  - type: Pricing
    url: https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
  - type: GettingStarted
    url: https://learn.microsoft.com/en-us/graph/tutorial-applications-basics
  - type: APIReference
    url: https://learn.microsoft.com/en-us/graph/api/resources/identity-network-access-overview
common:
- type: VendorFacets
  url: vendor-facets/microsoft-entra-vendor-facets.yml
- type: RateLimits
  url: rate-limits/microsoft-entra-rate-limits.yml
- type: Plans
  url: plans/microsoft-entra-plans-pricing.yml
- type: Website
  url: https://www.microsoft.com/
- type: CapabilityMap
  url: capabilities/microsoft-entra-capability-edges.yml
  name: Microsoft Entra Business Capability Map
- type: AgenticAccess
  url: agentic-access/microsoft-entra-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/microsoft-entra-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/microsoft-entra-domain-security.yml
- type: Authentication
  url: authentication/microsoft-entra-authentication.yml
- type: OAuthScopes
  url: scopes/microsoft-entra-scopes.yml
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/microsoft-entra/overview
- type: Arazzo
  url: arazzo/microsoft-entra-audit-user-memberships-workflow.yml
  name: Microsoft Entra Audit User Memberships
- type: Arazzo
  url: arazzo/microsoft-entra-create-group-with-member-workflow.yml
  name: Microsoft Entra Create Group With Member
- type: Arazzo
  url: arazzo/microsoft-entra-create-m365-group-with-owner-member-workflow.yml
  name: Microsoft Entra Create Microsoft 365 Group With Member
- type: Arazzo
  url: arazzo/microsoft-entra-decommission-application-workflow.yml
  name: Microsoft Entra Decommission Application
- type: Arazzo
  url: arazzo/microsoft-entra-deprovision-user-workflow.yml
  name: Microsoft Entra Deprovision User
- type: Arazzo
  url: arazzo/microsoft-entra-find-and-update-application-workflow.yml
  name: Microsoft Entra Find And Update Application
- type: Arazzo
  url: arazzo/microsoft-entra-find-and-update-group-workflow.yml
  name: Microsoft Entra Find And Update Group
- type: Arazzo
  url: arazzo/microsoft-entra-find-and-update-user-workflow.yml
  name: Microsoft Entra Find And Update User
- type: Arazzo
  url: arazzo/microsoft-entra-grant-app-role-assignment-workflow.yml
  name: Microsoft Entra Grant App Role Assignment
- type: Arazzo
  url: arazzo/microsoft-entra-offboard-user-from-group-workflow.yml
  name: Microsoft Entra Offboard User From Group
- type: Arazzo
  url: arazzo/microsoft-entra-onboard-user-to-group-workflow.yml
  name: Microsoft Entra Onboard User To Group
- type: Arazzo
  url: arazzo/microsoft-entra-provision-user-workflow.yml
  name: Microsoft Entra Provision User
- type: Arazzo
  url: arazzo/microsoft-entra-register-app-with-service-principal-workflow.yml
  name: Microsoft Entra Register Application With Service Principal
- type: Arazzo
  url: arazzo/microsoft-entra-rotate-application-secret-workflow.yml
  name: Microsoft Entra Rotate Application Secret
- type: Portal
  url: https://entra.microsoft.com/
- type: GettingStarted
  url: https://learn.microsoft.com/en-us/entra/fundamentals/
- type: Blog
  url: https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/bg-p/Identity
- type: Support
  url: https://learn.microsoft.com/en-us/entra/fundamentals/how-to-get-support
- type: StatusPage
  url: https://status.azure.com/
- type: TermsOfService
  url: https://www.microsoft.com/licensing/terms/
- type: PrivacyPolicy
  url: https://privacy.microsoft.com/
- type: ChangeLog
  url: https://learn.microsoft.com/en-us/entra/fundamentals/whats-new
- type: SDKs
  url: https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
- type: GitHubOrganization
  url: https://github.com/microsoftgraph
- type: Authentication
  url: https://learn.microsoft.com/en-us/graph/auth/
- type: Pricing
  url: https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
- type: JSONLD
  url: json-ld/microsoft-entra-context.jsonld
- type: JSONSchema
  url: json-schema/microsoft-entra-user-schema.json
- type: JSONSchema
  url: json-schema/microsoft-entra-application-schema.json
- type: Features
  data:
  - name: Identity and Access Management
    description: Manage user identities, authentication, and authorization across cloud and hybrid environments with single
      sign-on.
  - name: Conditional Access
    description: Enforce adaptive access policies based on user, device, location, and risk signals for zero trust security.
  - name: Identity Governance
    description: Automate access reviews, entitlement management, and lifecycle workflows to ensure proper access controls.
  - name: Privileged Identity Management
    description: Manage, control, and monitor privileged access with just-in-time and approval-based activation.
  - name: Verified ID
    description: Issue and verify decentralized identity credentials using open standards for portable, self-sovereign identity.
  - name: External Identities
    description: Enable secure collaboration with external partners and customers through B2B and B2C identity management.
  - name: Global Secure Access
    description: Provide identity-centric secure web gateway and zero-trust network access for internet and private resources.
  - name: Workload Identities
    description: Secure and manage identities for applications, services, scripts, and containers running as software workloads.
- type: UseCases
  data:
  - name: Zero Trust Implementation
    description: Implement zero trust architecture with identity-based access controls, conditional access policies, and continuous
      verification.
  - name: Hybrid Identity Management
    description: Synchronize and manage identities across on-premises Active Directory and cloud environments.
  - name: Application Single Sign-On
    description: Enable SSO for thousands of SaaS and on-premises applications with SAML, OIDC, and password-based authentication.
  - name: Automated User Provisioning
    description: Automate user lifecycle management with SCIM-based provisioning and deprovisioning across integrated applications.
  - name: AI Agent Identity Management
    description: Create, secure, and monitor identities for AI agents with authentication, authorization, and lifecycle management.
- type: Integrations
  data:
  - name: Microsoft 365
    description: Deep integration for identity and access management across all Microsoft 365 applications and services.
  - name: Azure Services
    description: Native identity provider for Azure resources including VMs, databases, storage, and managed identities.
  - name: Active Directory
    description: Hybrid identity synchronization with on-premises Active Directory using Azure AD Connect.
  - name: Salesforce
    description: SAML and SCIM integration for single sign-on and automated user provisioning with Salesforce.
  - name: ServiceNow
    description: SSO and automated provisioning integration with ServiceNow ITSM platform.
  - name: Workday
    description: Inbound provisioning from Workday HR to automate user lifecycle management.
  - name: SAP
    description: SSO and provisioning integration with SAP applications and S/4HANA.
  - name: Okta
    description: Cross-platform identity federation and migration support with Okta identity provider.
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
  url: https://apievangelist.com/
x-parent: microsoft
x-relationship: product

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/microsoft-entra"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/microsoft-entra/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/microsoft-entra/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

Microsoft Entra

What this lets a business do 1

What adopting Microsoft Entra External ID moves on the Kin Score 4

Standards implemented 1

APIs 17

Postman Collections 1

Open Collections 6

Arazzo Workflows 14

Pricing Plans 2

Rate Limits 1

FinOps 1

Features 8

Identity and Access Management

Conditional Access

Identity Governance

Privileged Identity Management

Verified ID

External Identities

Global Secure Access

Workload Identities

Semantic Vocabularies 2

Spectral Rules 2

JSON Schema 48

JSON Structure 25