> ## Documentation Index
> Fetch the complete documentation index at: https://backstage.spotify.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Create an Azure App Registration

> Register a new Azure App in Microsoft Entra ID with the correct redirect URI so Portal can authenticate users via OAuth.

export const providerName_0 = "Entra ID"

<Warning>
  It is important to follow all the steps in this guide to ensure a successful configuration of {providerName_0} authentication.

  If you encounter any issues, [please contact support](https://backstage.spotify.com/account/support/).
</Warning>

Portal includes a built-in Microsoft authentication provider that uses Microsoft Azure Entra ID OAuth for user authentication. To enable Entra ID authentication for your Portal instance, follow these steps.

Follow the guidelines in [Configure App Registration on Azure](https://backstage.io/docs/auth/microsoft/provider/#configure-app-registration-on-azure) and the [Outbound Network Access](https://backstage.io/docs/auth/microsoft/provider/#outbound-network-access) to create a new App Registration in Azure named Spotify Portal or similar. When specifying the Redirect URI, use:

```
https://<YOUR_COMPANY>.spotifyportal.com/api/auth/microsoft/handler/frame
```

## Next Steps

You now have a new Azure App Registration. We will use it in the next section to configure the Microsoft Graph provider in Portal to ingest users and groups from your organization.

Continue to the next section to learn how to configure Microsoft Graph and complete this integration.