| title | Include file |
|---|---|
| description | Include file |
| services | api-center |
| ms.service | azure-api-center |
| ms.topic | include |
| ms.date | 02/25/2026 |
| ms.custom | Include file |
To configure Microsoft Entra ID as an identity provider, first configure an app registration in your Microsoft Entra ID tenant. The app registration enables the API Center portal to access data from your API center on behalf of a signed-in user.
API Center can set up the app registration automatically, or you can create the app registration manually.
To set up the app registration automatically, follow these steps:
-
In the Azure portal, go to your API center.
-
In the sidebar menu, select API Center portal > Settings.
-
On the Access tab, select Configure Entra ID. :::image type="content" source="../media/set-up-api-center-portal/configure-access-entra-id.png" alt-text="Screenshot showing configuration of Entra ID in the portal.":::
-
On the Set up user sign-in with Microsoft Entra ID page, select Configure.
-
On the Access tab, select Save + publish.
If you need to access the app registration later, you can find it in the portal under App registrations. The application is named with the following format: <api-center-name>-apic-aad.
If you want to create the app registration manually, follow these steps:
-
In the Azure portal, go to Microsoft Entra ID > Manage > App registrations.
-
Select + New registration.
-
On the Register an application page, set the values as follows:
- Set Name to a meaningful name such as api-center-portal
- Under Supported account types, select Accounts in this organizational directory only (<Directory name> - Single tenant).
- In Redirect URI, select Single-page application (SPA) and set the URI.
Enter the URI of your API Center portal deployment, in the following form:
https://<service-name>.portal.<location>.azure-apicenter.ms. Replace<service name>and<location>with the name of your API center and the location where it's deployed, Example:https://myapicenter.portal.eastus.azure-apicenter.ms. - Select Register.
When enabling the API Center portal view in the Visual Studio Code extension for API Center, also configure the following redirect URIs in the app registration:
-
In the Azure portal, navigate to your app registration.
-
On the Manage > Authentication page, select Add a platform and select Mobile and desktop applications.
-
Configure the following three custom redirect URIs:
https://vscode.dev/redirect
http://localhost
ms-appx-web://Microsoft.AAD.BrokerPlugin/<application-client-id>Replace
<application-client-id>with the application (client) ID of this app. You can find this value on the Overview page of the app registration.