# Microsoft Entra ID + Lutril: setup guide

> Lutril connects to Microsoft Entra ID (Azure AD) as a registered app using the OAuth 2.0 client credentials flow. You provide the Tenant ID, Client ID, and a Client Secret, and grant Microsoft Graph application permissions.

Source: https://www.lutril.com/integrations/azure
Category: Identity (IDP)
Auth: service_account
Last verified: 2026-06-17

---

## Setup

1. [object Object]
2. On the app Overview page, copy the Application (client) ID and the Directory (tenant) ID into Lutril.
3. Open Certificates and secrets, click New client secret, set an expiry, then copy the secret Value (shown only once) into Lutril.
4. Open API permissions, click Add a permission, choose Microsoft Graph, then Application permissions, and add the permissions listed above.
5. Click Grant admin consent for your tenant and confirm that each permission shows Granted under Status.

## Access requested

- Microsoft Graph: User.Read.All (application)
- Microsoft Graph: Directory.Read.All (application)
- Microsoft Graph: AuditLog.Read.All (application)
- Microsoft Graph: User.ReadWrite.All (application, required to create or update users)

## References

- [Microsoft Entra ID documentation](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app)
- [Microsoft Entra ID console](https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade)
- [Register an application](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app)
- [Get access without a user (client credentials)](https://learn.microsoft.com/en-us/graph/auth-v2-service)