# Microsoft Entra

**Canonical:** https://apis.io/providers/microsoft-entra/  
**Website:** https://entra.microsoft.com/  
**APIs profiled:** 17

Microsoft Entra (formerly Azure Active Directory) provides identity and access management services including authentication, authorization, and directory services.

## Kin Score — 50.7 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 50.7).

| Facet | Score |
|---|---|
| Discoverability | 64.8 |
| Contract Quality | 70.6 |
| Governance | 9.8 |
| Contract Governance | 9.8 |
| Operational Transparency | 42.1 |
| Developer Ergonomics | 52.4 |
| Commercial Clarity | 47.4 |
| Access Clarity | 47.4 |

## Agent readiness — 29.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (17)

- **Microsoft Entra ID Protection API** — API for identity risk detection, investigation, and remediation.
- **Microsoft Entra Conditional Access API** — API for managing conditional access policies and controls.
- **Microsoft Entra Privileged Identity Management API** — API for managing privileged access and just-in-time administration.
- **Microsoft Entra Verified ID API** — API for issuing and verifying decentralized identity credentials.
- **Microsoft Entra External ID API** — API for managing customer and partner identity and access management.
- **Microsoft Entra ID Governance API** — API for managing identity governance including access reviews, entitlement management, and lifecycle workflows to ensure the right people have the right access at the right time.
- **Microsoft Entra Application Management API** — API for registering, configuring, and managing applications and service principals in Microsoft Entra ID.
- **Microsoft Entra Authentication Methods API** — API for managing user authentication methods including FIDO2 security keys, passwordless phone sign-in, Microsoft Authenticator, and MFA registration.
- **Microsoft Entra Workload ID API** — API for managing and securing identities for software workloads such as applications, services, scripts, and containers.
- **Microsoft Entra Provisioning API** — API for automating user provisioning and deprovisioning using SCIM protocol, including API-driven inbound provisioning from any system of record.
- **Microsoft Entra Global Secure Access API** — API for managing Microsoft Entra Internet Access and Microsoft Entra Private Access, providing identity-centric secure web gateway and zero-trust network access.
- **Microsoft Identity Platform API** — API endpoints for OAuth 2.0, OpenID Connect, and SAML authentication protocols enabling application integration with Microsoft Entra ID.
- **Microsoft Entra Agent ID API** — API for creating, securing, and monitoring AI agent identities, providing authentication, authorization, and lifecycle management for AI agents.
- **Microsoft Entra Applications API** — Register and manage application objects that define application configuration including credentials, permissions, and sign-in settings
- **Microsoft Entra Groups API** — Manage groups for organizing users, devices, and other principals including Microsoft 365 groups, security groups, and distribution lists
- **Microsoft Entra ServicePrincipals API** — Manage service principal objects that represent application instances in a tenant for authentication and authorization
- **Microsoft Entra Users API** — Manage user accounts in the directory including creation, updates, profile management, and lifecycle operations

## Agentic access (1)

- **Microsoft Entra Agentic Access** — 28 operations · 17 acting

## Security (3)

- **Microsoft Entra Authentication** — oauth2 · 1 scheme
- **Microsoft Entra Domain Security** — TLSv1.3 · HSTS · DMARC
- **Microsoft Entra Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Microsoft Entra Plans Pricing**

## Use cases (5)

- **Zero Trust Implementation** — Implement zero trust architecture with identity-based access controls, conditional access policies, and continuous verification.
- **Hybrid Identity Management** — Synchronize and manage identities across on-premises Active Directory and cloud environments.
- **Application Single Sign-On** — Enable SSO for thousands of SaaS and on-premises applications with SAML, OIDC, and password-based authentication.
- **Automated User Provisioning** — Automate user lifecycle management with SCIM-based provisioning and deprovisioning across integrated applications.
- **AI Agent Identity Management** — Create, secure, and monitor identities for AI agents with authentication, authorization, and lifecycle management.

## Tags

Access Management, Authentication, Azure AD, Entra, Identity, Identity Governance, Microsoft, Network Security, Security, Zero Trust

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/microsoft-entra/). Scores are computed from the provider's own public artifacts under a published rubric.
