Microsoft identity platform documentation
Use the Microsoft identity platform and our open-source authentication libraries to sign in users with Azure AD accounts, Microsoft accounts, and social accounts like Facebook and Google. Protect your web APIs and access protected APIs like Microsoft Graph to work with your users' and organization's data.
Authentication and authorization for any application
Focus on documentation for the app you're building or extending with identity and access management (IAM) support by selecting its type.
A traditional, or "classic," web app whose code runs on a server, returning page data for the browser to render.
A RESTful web service accessed by applications or other web APIs, typically to work with data served by the API.
Applications with a user interface (UI) whose code runs on a user's desktop, laptop, or notebook computer.
Applications with a UI whose code runs on a user's phone, tablet, or other mobile device.
An application or script without a UI that performs non-interactive tasks like server-to-server communication or scheduled jobs.
Quick access to guidance on adding core IAM features to your applications and best practices for keeping your apps secure and available.
Sign in users
Test and deploy apps
Build for security and resilience
Microsoft authentication libraries on GitHub
The open-source Microsoft Authentication Library (MSAL) is hosted on GitHub. Built and supported by Microsoft, we recommend MSAL for any app that uses theMicrosoft identity platform for authentication and authorization.
Authenticate partners and customers
Sign in users from partner organizations in a business-to-business (B2B) scenario or create custom sign-up and sign-in experiences for your customers in a business-to-customer (B2C) scenario.
Connect to Microsoft Graph
Programmatic access to organizational, user, and application data stored in Azure Active Directory. Call Microsoft Graph from your application to create and manage Azure AD users and groups, get and modify your users' data like their profiles, calendars, email, and more.
Manage and market your apps
Make existing SaaS applications like Dropbox, Salesforce, and ServiceNow available to your organization's users, configure SSO, and manage security. Or, become an independent software vendor (ISV) by publishing your own SaaS application for use by _other_ organizations that use Azure AD.
Manage application users and their access
Automatically create user identities and their roles in your organization's installed SaaS applications. HR-driven provisioning, System for Cross-domain Identity Management (SCIM), and more.