Entra External ID Custom Authentication Extension Max Timeout

Question

Entra External ID Custom Authentication Extension Max Timeout

Ryan Buening 15

Entra External ID custom authentication extensions endpoints should allow for a greater max timeout duration. The maximum allowed is currently 2 seconds which seems a bit too restrictive.

https://learn.microsoft.com/en-us/entra/identity-platform/custom-extension-troubleshoot?tabs=api-testing-tools#common-performance-improvements

Henry Zhang 206 Reputation points

2025-05-23T16:36:30.45+00:00

Same issue here, 2s is too restricted....
Richard Bergquist 20 Reputation points

2025-06-16T03:27:01.7966667+00:00

Same issue! Our Azure Functions run in the same region as the Entra Ext Id tenant. However they need to call out to other API's too. We have implemented local caching for secrets and access tokens, but despite that sometimes the Azure function downstream calls can add up to be > 2000 ms. When this occurs the Entra Ext Id sign in errors.

This seems to be an aggressively small limit. If Entra Ext Id signins regularly fail intermittently it is not an acceptable end user solution.

Quite surprising this is not causing common issues, there must be lots of organisations struggling with this limit? Is there any information if this 2000ms limit will be improved?

1 answer

Your answer

Henry Zhang 206 Reputation points

2025-05-23T16:36:30.45+00:00

Same issue here, 2s is too restricted....
Richard Bergquist 20 Reputation points

2025-06-16T03:27:01.7966667+00:00

Same issue! Our Azure Functions run in the same region as the Entra Ext Id tenant. However they need to call out to other API's too. We have implemented local caching for secrets and access tokens, but despite that sometimes the Azure function downstream calls can add up to be > 2000 ms. When this occurs the Entra Ext Id sign in errors.

This seems to be an aggressively small limit. If Entra Ext Id signins regularly fail intermittently it is not an acceptable end user solution.

Quite surprising this is not causing common issues, there must be lots of organisations struggling with this limit? Is there any information if this 2000ms limit will be improved?

Answer 1

Abiola Akinbade 30,495 Volunteer Moderator

Hello Ryan Buening,

Thanks for your question.

While the current limit is 2 seconds, I will recommend you can post this as a feature request on the feedback portal. This is a dedicated platform for users to suggest new features and improvements. Here is the link: https://feedback.azure.com/d365community/

Regards,

Abiola

You can mark it 'Accept Answer' and upvote if this helped.

Mike Hook 0 Reputation points

2026-03-24T12:20:22.87+00:00

We are also experiencing an issue with the 2 second max timeout. the feedback.azure.com site seems to have an SSL error at the moment, is there any alternative space for Entra External ID feature requests we can get to?