> For the complete documentation index, see [llms.txt](https://docs.devarmor.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devarmor.com/getting-started/single-sign-on-sso-authentication/microsoft-login-azure-ad.md).

# Microsoft Login (Azure AD)

### Enabling Microsoft Login for Your Organization

To allow your team to sign in to DevArmor using their Microsoft accounts, an Azure AD administrator at your organization needs to complete a one-time setup.

#### What you need

* An Azure Active Directory tenant (any Microsoft 365 or Azure subscription includes one)
* An account with the **Global Administrator** or **Cloud Application Administrator** role

#### Steps

**1. Grant admin consent**

Grant admin consent to the DevArmor application in your tenant by visiting the following URL while signed in as an administrator:

```
https://login.microsoftonline.com/common/adminconsent?client_id=e5a3ca80-f651-4f5b-89ab-622dfa12f7fb
```

You will be prompted to review and approve the permissions DevArmor requests (`openid`, `email`, `profile`). These are read-only and used only for authentication.

**2. Share your Tenant ID**

Share your tenant ID with your DevArmor contact. You can find it in the Azure Portal under:

**Azure Active Directory → Overview → Tenant ID**

***

That's it! DevArmor handles the rest of the configuration on our end. Once complete, your users can sign in with their existing Microsoft credentials.

**Notes**

* Only organizational accounts (e.g. `you@yourcompany.com`) are supported. Personal Microsoft accounts (`@outlook.com`, `@hotmail.com`) cannot be used.
* Individual users do not need to install anything or create a new account.