> ## Documentation Index
> Fetch the complete documentation index at: https://backstage.spotify.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Setup auth provider

> Configure Microsoft Entra ID as the Portal sign-in provider by entering Azure App Registration credentials and enabling the auth resolver.

export const providerName_0 = "Entra ID"

<Warning>
  It is important to follow all the steps in this guide to ensure a successful configuration of {providerName_0} authentication.

  If you encounter any issues, [please contact support](https://backstage.spotify.com/account/support/).
</Warning>

Portal includes a built-in Microsoft authentication provider that uses Microsoft Azure Entra ID OAuth for user authentication. To enable Entra ID authentication for your Portal instance, follow these steps.

## Configure the Authentication Provider in Portal

1. From the admin sidebar section -> `App settings` -> `Auth` -> `Entra ID`.
2. Enter the following details from your Azure App Registration:
   * `Client ID`
   * `Tenant ID`
   * `Client secret`

<Frame>
  <img src="https://mintcdn.com/spotify-89f50c35/FZ08uNumGsfd2d93/portal/assets/entra-id-auth-app-credentials.png?fit=max&auto=format&n=FZ08uNumGsfd2d93&q=85&s=c4bc6e3e8b7353b27f77bcbd7f0b86b7" alt="Add app credentials" width="1336" height="872" data-path="portal/assets/entra-id-auth-app-credentials.png" />
</Frame>

5. Below, select `Enable` under the `Use for Sign in` selector, then select `UserId matching user entity annotation` as resolver strategy.

<Frame>
  <img src="https://mintcdn.com/spotify-89f50c35/FZ08uNumGsfd2d93/portal/assets/entra-id-auth-enable.png?fit=max&auto=format&n=FZ08uNumGsfd2d93&q=85&s=c060e5af1a8b29b439876b5c6e3a7c66" alt="Add sign in resolver" width="1454" height="867" data-path="portal/assets/entra-id-auth-enable.png" />
</Frame>

6. Click Save.

## Test your new auth provider

To test your new auth provider, you can sign out of Portal and sign back in using your {props.providerName} credentials. If you are unable to sign in, please reach out to your organization's Portal admin for assistance.
To sign out follow these steps:

1. Select your profile from the sidebar
2. Press "Sign Out"
3. Sign back in using your Entra ID credentials

## Next Steps

Your Portal instance is now set up to authenticate users via Microsoft Entra ID and this completes the Entra ID setup guide.

In the next section, you can learn how to retain admin access to Portal for your user ingested from Entra ID.
