Microsoft Entra · Rate Limits

Microsoft Entra Rate Limits

Name: Microsoft Entra Rate Limits
Creator: Microsoft Entra
License: https://apis.io/terms/
Keywords: Identity and Access Management, Authentication, Azure AD, Entra, Identity, Identity Governance, Microsoft, Network Security, Security, Zero Trust, Identity Federation

Microsoft Entra Rate Limits is the rate-limit profile for Microsoft Entra on the APIs.io network — every limit transcribed verbatim from the provider’s own documentation on 2026-11-05.

It captures 5 rate-limit definitions, including Microsoft Graph global limit — Any 130,000 requests per 10 seconds; Identity and access reports — Any 122 requests per 10 seconds Five requests per 10 seconds; Identity and access reports signInActivity — GET signInActivity 10 requests per minute 10 requests per minute.

Limit state is signalled in the Retry-After response header, and an exhausted limit returns HTTP 429.

Tagged areas include Identity and Access Management, Authentication, Azure AD, Entra, and Identity.

5 Limits Exhausted: HTTP 429 Retry-After

Transcribed from the provider's documentation on 2026-11-05 — learn.microsoft.com/en-us/graph/throttling-limits.

View Source

Identity and Access ManagementAuthenticationAzure ADEntraIdentityIdentity GovernanceMicrosoftNetwork SecuritySecurityZero TrustIdentity Federation

Limits

Microsoft Graph global limit per app across all tenants

Any 130,000 requests per 10 seconds

· per 10 seconds

Identity and access reports per app for all tenants

Any 122 requests per 10 seconds Five requests per 10 seconds

· per 10 seconds

five requests per 10 seconds per app per tenant

Identity and access reports signInActivity per app for all tenants and per app per tenant

GET signInActivity 10 requests per minute 10 requests per minute

GET signInActivity

· per 1 minute

Identity protection and conditional access per tenant for all apps

Any One request per second

· per 1 second

resources riskDetection, riskyUser, riskyUserHistoryItem, namedLocation, countryNamedLocation, ipNamedLocation, conditionalAccessPolicy; these don't return a Retry-After header on 429

Identity providers per tenant for all apps

Any 300 requests per 1 minute 200 requests per 1 minute

· per 1 minute

200 requests per 1 minute per app per tenant

Sources

Work with this as data

Every rate limit here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for rate limits

4 MCP tools reach this

find_rate_limitsBrowse and filter every rate limit in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This rate limit

curl "https://apis.io/api/v1/rate-limits/microsoft-entra-rate-limits"

All rate limits

curl "https://apis.io/api/v1/rate-limits?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.