Can Azure Terraform Authentication Be Done with a Microsoft Entra ID Account Instead of a Microsoft Account?

Question

Can Azure Terraform Authentication Be Done with a Microsoft Entra ID Account Instead of a Microsoft Account?

AzureTest04 180

I am planning to authenticate Azure and Terraform using the procedure described

below: https://learn.microsoft.com/en-us/azure/developer/terraform/authenticate-to-azure-with-microsoft-account

The above document explains the authentication method using a Microsoft account. Can the same procedure be used with a Microsoft Entra ID account?

Or are the steps different when using a Microsoft account versus a Microsoft Entra ID account?

0 comments

Answer accepted by question author

Rukmini 42,515 Microsoft External Staff Moderator

Hello Azure検証ユーザー

Yes, a Microsoft Entra ID account can be used in the same way. Because authentication is carried out via the Azure CLI (az login), which supports both account types, the procedures in the document are applicable to both Microsoft personal accounts (MSA) and Microsoft Entra ID (work or school) accounts.

Both Microsoft accounts and Entra ID accounts require the same authentication procedures.
The type of account used to log in (personal vs. work/school) is the only difference.
It is advised to utilize a Service Principal or Managed Identity rather than a user account for automation or production Terraform deployments.

Let me know if any further queries - feel free to reach out!

If the resolution was helpful, kindly take a moment to click on and click on Yes for was this answer helpful. And, if you have any further query do let us know.

Rukmini 42,515 Reputation points Microsoft External Staff Moderator

2026-03-06T18:02:05.55+00:00

Hello Azure検証ユーザー If the resolution was helpful, kindly take a moment to click on and click on Yes for was this answer helpful. And, if you have any further query do let us know.

1 additional answer

Your answer

Rukmini 42,515 Reputation points Microsoft External Staff Moderator

2026-03-06T18:02:05.55+00:00

Hello Azure検証ユーザー If the resolution was helpful, kindly take a moment to click on and click on Yes for was this answer helpful. And, if you have any further query do let us know.

Answer 1

The procedure in the referenced article is specifically for signing in with a Microsoft account (personal account) and managing Azure subscriptions associated with that Microsoft account.

Microsoft Entra ID (work or school account) is a different identity system from a Microsoft account, so the steps are not identical. When using Microsoft Entra ID:

The identity is an Entra ID user, service principal, or managed identity, not a Microsoft account.
Authentication is typically done via Microsoft Entra ID app registration, service principal, or managed identity, and then assigning appropriate RBAC roles to that identity.
The flow follows the pattern described for Entra ID–based authentication: register an application in Microsoft Entra ID, add a client secret (or certificate), assign RBAC roles, obtain an access token, and then use that token (or the corresponding credentials) from Terraform.

The article on authenticating to Azure with a Microsoft account therefore cannot be used as-is for Microsoft Entra ID accounts; Entra ID authentication requires the Entra-specific steps (app registration, RBAC, token acquisition) rather than the Microsoft account–centric flow.

References:

Share via

Can Azure Terraform Authentication Be Done with a Microsoft Entra ID Account Instead of a Microsoft Account?

1 additional answer

Your answer