- A Microsoft Azure Entra ID Tenant

- Permission to create Applications in your Azure environment

1. Open Microsoft Azure Portal (https://portal.azure.com) → Microsoft Entra ID → App Registrations → New Registration.

2. Name: Name your application appropriately

9. Now, click on the tab labeled "Authentication" and click on "Add a platform", select "Web" and for the redirect URI enter your Coder callback URL, and then hit "Configure" at the bottom:

Set the following environment variables on your Coder deployment and restart Coder:

- "invalid redirect_uri": ensure the redirect URI in Azure Entra ID matches`https://<your-coder-host>/api/v2/users/oidc/callback`.

- Domain restriction: if users from unexpected domains can log in, verify`CODER_OIDC_EMAIL_DOMAIN`.

- Claims: to inspect claims returned byGoogle, see guidance in the[OIDC overview](./index.md#oidc-claims).

- Claims: to inspect claims returned byMicrosoft, see guidance in the[OIDC overview](./index.md#oidc-claims).