Skip to main content

Log in with Entra ID

There are several ways that Entra ID can be integrated with authentik to allow for user and group provisioning and authentication with Entra ID user credentials. If you are instead looking to authenticate to Entra ID with authentik credentials, refer to our Microsoft 365 SAML or Microsoft 365 WS-Federation integrations guides.

OAuth​

The Entra ID OAuth guide explains how to set up Entra ID as a federated OAuth identity provider for authentik.

This enables users to sign in to authentik using their Entra ID credentials. User accounts are created in authentik upon first login and updated on each subsequent login.

Alternatively, Entra ID authentication can be embedded into a flow via a Source stage.

SCIM​

The Entra ID SCIM guide explains how you can provision users and groups from Entra ID into authentik via the SCIM protocol.

Optionally, both the OAuth and SCIM integrations can be used in conjunction so that users and groups are provisioned before a user signs in using their Entra ID credentials. This is the recommended setup for organizations with large numbers of users and groups.