# Microsoft Entra

## Register an application

* Go to [portal.azure.com](http://portal.azure.com)
* Select “Microsoft Entra ID” (Previously Azure Active Directory), in the left sidebar select “App registrations”
* Select “+ New registration”
* Choose “Accounts in this organizational directory only”
* For the Redirect Uri choose “Web” and enter the URL: `https://docs.mycompany.com/auth/azure.callback`
* Save the new app
* Make a note of the client id

## API permissions

* Select “API permissions” in the sidebar
* Click on “Add a permission” and add delegated `email` , `offline_access`, and `profile` permissions from the Microsoft Graph API.

 ![Permissions UI in Azure](https://outline-production-attachments.s3-accelerate.amazonaws.com/uploads/292079f8-0319-4111-bb5b-315e8ae8f14e/138c0860-3602-4075-82d6-f1396a928134/image.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA4EOUDTOVUICLPZ4P%2F20260905%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260905T161500Z&X-Amz-Expires=86400&X-Amz-Signature=3df33df691293ed4bdba7715f20c6cdfa142110daf945eb7050ebfd8cb5c5e52&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject)

## Certificates and secrets

* Select “Certificates and secrets” in the left sidebar
* Select “+ New client secret”, name it something like “wiki” and **make a note of the resulting secret value**
* Select “Manifest” in the left sidebar, find the `resourceAppId` and make a **make a note of the value**

 ![resourceAppId](https://outline-production-attachments.s3-accelerate.amazonaws.com/uploads/292079f8-0319-4111-bb5b-315e8ae8f14e/273272f0-1f9a-46b7-a8eb-bcf6ad2024f9/image.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA4EOUDTOVUICLPZ4P%2F20260905%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260905T161500Z&X-Amz-Expires=86400&X-Amz-Signature=7879572d03152b2fa92ae1e4942db3c92604ba082525fdd414ebf84260b8d114&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject)

## Configure Outline

Add the values noted from the above process in the following environment variables, once you restart the instance you’ll see a new option to sign-in with Microsoft.

| Environment variable |     |
|----------------------|-----|
| `AZURE_CLIENT_ID`    | Enter value from when you registered the application |
| `AZURE_CLIENT_SECRET` | Enter value from when you registered the application |
| `AZURE_RESOURCE_APP_ID` (optional) | The default value is `00000003-0000-0000-c000-000000000000` |
| `AZURE_TENANT_ID` (optional) | Adding a tenant ID improves the sign-in experience ([How to find](https://learn.microsoft.com/en-us/entra/fundamentals/how-to-find-tenant)) |

---

**Documents**

- [License restrictions](https://docs.getoutline.com/s/hosting/doc/license-restrictions-f9aq6uEL3H)
- [Requirements](https://docs.getoutline.com/s/hosting/doc/requirements-ULdYnwi4wG)
- [Installation methods](https://docs.getoutline.com/s/hosting/doc/installation-methods-pSvgz9j0QC)
- [Configuration](https://docs.getoutline.com/s/hosting/doc/configuration-509J4lAzjo)
- [Business + Enterprise](https://docs.getoutline.com/s/hosting/doc/business-enterprise-rv0715NxO3)
- [Backups](https://docs.getoutline.com/s/hosting/doc/backups-KZtPOADCHG)
- [Troubleshooting](https://docs.getoutline.com/s/hosting/doc/troubleshooting-HXckrzCqDJ)