Microsoft Entra ID OpenID Connect Provider

Microsoft Entra ID is an identity and access management platform that provides a comprehensive set of features to authenticate and authorize users.

Features

Grant Types

Extensions

Endpoints

Token Endpoint Authentication Methods

none
client_secret_basic
client_secret_post
client_secret_jwt
private_key_jwt
tls_client_auth

Prompts

Features

Financial-grade API (FAPI)

If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.

Looking for Microsoft Entra ID’s (C)IAM features like MFA, SSO, and user management? View Microsoft Entra ID on the (C)IAM Identity Providers benchmark.

Frequently Asked Questions

Does Microsoft Entra ID support the Authorization Code grant type?

Microsoft Entra ID supports Authorization Code grant type. Read more

Does Microsoft Entra ID support the Refresh Token grant type?

Microsoft Entra ID supports Refresh Token grant type. Read more

Does Microsoft Entra ID support the Client Credentials grant type?

Microsoft Entra ID supports Client Credentials grant type. Read more

Does Microsoft Entra ID support the Implicit grant type?

Microsoft Entra ID supports Implicit, but it is deprecated or not recommended anymore. Read more

Does Microsoft Entra ID support the Token Exchange grant type?

Microsoft Entra ID does not support Token Exchange grant type. Microsoft Entra ID uses the On-Behalf-Of flow instead of the standard RFC 8693 token exchange grant type Read more

Does Microsoft Entra ID support the Device Authorization Grant grant type?

Microsoft Entra ID supports Device Authorization Grant grant type. Read more

Does Microsoft Entra ID support the JWT Bearer Token grant type?

Microsoft Entra ID supports JWT Bearer Token grant type. Read more

Does Microsoft Entra ID support the SAML 2.0 Bearer Assertion grant type?

Microsoft Entra ID partially supports SAML 2.0 Bearer Assertion grant type. Supports exchange of SAML v1.1 tokens issued by AD FS, not SAMLv2 tokens issued by Entra ID itself Read more

Does Microsoft Entra ID support the Resource Owner Password Credentials grant type?

Microsoft Entra ID supports Resource Owner Password Credentials, but it is deprecated or not recommended anymore. Read more

Does Microsoft Entra ID support the PKCE extension?

Microsoft Entra ID supports PKCE extension. Read more

Does Microsoft Entra ID support the Authorization Endpoint endpoint?

Microsoft Entra ID supports Authorization Endpoint endpoint. Read more

Does Microsoft Entra ID support the Token Endpoint endpoint?

Microsoft Entra ID supports Token Endpoint endpoint. Read more

Does Microsoft Entra ID support the UserInfo Endpoint endpoint?

Microsoft Entra ID supports UserInfo Endpoint endpoint. Read more

Does Microsoft Entra ID support the Token Revocation endpoint?

Microsoft Entra ID does not support Token Revocation endpoint. Read more

Does Microsoft Entra ID support the Token Introspection endpoint?

Microsoft Entra ID does not support Token Introspection endpoint.

Does Microsoft Entra ID support the Device Authorization Endpoint endpoint?

Microsoft Entra ID supports Device Authorization Endpoint endpoint. Read more

Does Microsoft Entra ID support the OpenID Connect Discovery Endpoint endpoint?

Microsoft Entra ID supports OpenID Connect Discovery Endpoint endpoint. Read more

Does Microsoft Entra ID support the OAuth 2.0 Authorization Server Metadata Endpoint endpoint?

Microsoft Entra ID partially supports OAuth 2.0 Authorization Server Metadata Endpoint endpoint. Supports through OpenID Connect Discovery Read more

Does Microsoft Entra ID support the none token endpoint authentication method?

Microsoft Entra ID supports none token endpoint authentication method.

Does Microsoft Entra ID support the client_secret_basic token endpoint authentication method?

Microsoft Entra ID supports client_secret_basic token endpoint authentication method. Read more

Does Microsoft Entra ID support the client_secret_post token endpoint authentication method?

Microsoft Entra ID supports client_secret_post token endpoint authentication method. Read more

Does Microsoft Entra ID support the private_key_jwt token endpoint authentication method?

Microsoft Entra ID supports private_key_jwt token endpoint authentication method. Read more

Does Microsoft Entra ID support the none prompt?

Microsoft Entra ID supports none prompt. Read more

Does Microsoft Entra ID support the login prompt?

Microsoft Entra ID supports login prompt. Read more

Does Microsoft Entra ID support the consent prompt?

Microsoft Entra ID supports consent prompt. Read more

Does Microsoft Entra ID support the select_account prompt?

Microsoft Entra ID supports select_account prompt. Read more

Does Microsoft Entra ID support the create prompt?

Microsoft Entra ID does not support create prompt.

Does Microsoft Entra ID support the RP-initiated Logout feature?

Microsoft Entra ID supports RP-initiated Logout feature. Read more

Does Microsoft Entra ID support the Dynamic Client Registration Protocol feature?

Microsoft Entra ID does not support Dynamic Client Registration Protocol feature.

Does Microsoft Entra ID support the Dynamic Client Registration Management Protocol feature?

Microsoft Entra ID does not support Dynamic Client Registration Management Protocol feature.

Does Microsoft Entra ID support the Refresh Token Rotation feature?

Microsoft Entra ID supports Refresh Token Rotation feature. Read more

Does Microsoft Entra ID support the OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature?

Microsoft Entra ID does not support OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature. Microsoft Entra ID uses SHR-based proof of possession instead of the standard DPoP (RFC 9449) Read more

Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.