---
title: Azure Active Directory
slug: authentication-guides/azure-active-directory
docTags: 
createdAt: 2026-06-22T11:01:02.937Z
---

# Introduction

This guide tells you how to authenticate the **Azure Active Directory** connector in Swimlane using OAuth 2.0 Client Credentials.

You will create an Azure application, assign Microsoft Graph API permissions, collect required identifiers, and configure the connector in Swimlane.

# Prerequisites

## Azure Access Requirements

You must have Azure permissions to:

- Register applications under Azure Active Directory
- Assign Microsoft Graph API permissions
- Grant admin consent
- Create client secrets
- View Azure Tenant information

# Required Credentials

During setup, you will collect:

| **Credential** | **Description**                   |
| -------------- | --------------------------------- |
| Client ID      | Azure Application (Client) ID     |
| Client Secret  | Azure Application Secret          |
| Tenant ID      | Azure Directory (Tenant) ID       |
| Token URL      | OAuth token endpoint              |
| URL            | Microsoft Graph API URL           |
| Scope          | Microsoft Graph permission scopes |

# Token URL

| **Action Type** | **Token URL**                                                                                                               |
| --------------- | --------------------------------------------------------------------------------------------------------------------------- |
| All Actions     | [https://login.microsoftonline.com//oauth2/v2.0/token](https://login.microsoftonline.com/%7Btenant_id%7D/oauth2/v2.0/token) |

# Host URL

| **Action Type** | **Host URL**                 |
| --------------- | ---------------------------- |
| All Actions     | https\://graph.microsoft.com |

# Azure Setup

Take the following steps to register the application:

1. Navigate to:
   **Azure Portal → Azure Active Directory → App Registrations**
2. Click **New Registration**.
3. Enter an application name.
4. Choose:
   **Accounts in this organizational directory only**
5. Click **Register**.

Take the following steps to assign API permissions:

1. Open the **API Permissions** tab.
2. Click **Add a permission**.
3. Select **Microsoft Graph**.
4. Select **Application permissions**.
5. Add the required permissions.

## Recommended Permissions

| **Permission**                |
| ----------------------------- |
| User.ReadWrite.All            |
| Directory.ReadWrite.All       |
| Directory.AccessAsUser.All    |
| User.ReadBasic.All            |
| Directory.Read.All            |
| User.ManageIdentities.All     |
| User.EnableDisableAccount.All |

6. Click **Add permissions**.
7. Click **Grant admin consent for your organization**.

Take the following steps to generate a Client Secret:

1. Navigate to:
   **Certificates & Secrets**
2. Click **New client secret**.
3. Add description and expiration.
4. Click **Add**.
5. Copy and save the secret value.

This saved value is the **Client Secret**.

Take the following steps to collect required identifiers:

From **App Registration → Overview**, copy:

- Client ID
- Tenant ID

Record the following values:

| **Value** | **Example**                                                                                                                 |
| --------- | --------------------------------------------------------------------------------------------------------------------------- |
| URL       | https\://graph.microsoft.com                                                                                                |
| Token URL | [https://login.microsoftonline.com//oauth2/v2.0/token](https://login.microsoftonline.com/%7Btenant_id%7D/oauth2/v2.0/token) |

# Connector Configuration in Swimlane

1. Log in to Turbine.
2. From the left-hand navigation pane, click **ORCHESTRATION** and click **Assets**.
3. Asset homepage opens.
4. Click the plus icon to open the **Configure your Connector Asset** window.
5. Select **Azure Active Directory** from the Asset type list.
6. Fill in the Asset Settings and Asset Input as shown:

| **Field**      | **Description**                   | **Required/Optional** |
| -------------- | --------------------------------- | --------------------- |
| url            | Microsoft Graph API URL           | Required              |
| token\_url     | Azure OAuth Token URL             | Required              |
| client\_id     | Azure Application Client ID       | Required              |
| client\_secret | Azure Application Client Secret   | Required              |
| scope          | Microsoft Graph permission scopes | Required              |
| verify\_ssl    | Enable/Disable SSL Verification   | Optional              |
| http\_proxy    | Optional proxy configuration      | Optional              |

Fields with \* marks are required.

![](https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/O-vufRBK54b4Cjwjxjtn3_image.png)

## Scope Configuration

The connector supports Microsoft Graph scopes.

Example scope:

`https://graph.microsoft.com/.default`

This scope allows the connector to use all Microsoft Graph API permissions granted to the application.

# Troubleshooting

## Authentication Failed

Verify:

- Client ID is correct
- Client Secret is correct
- Tenant ID is correct
- Token URL includes the correct Tenant ID
- Admin consent has been granted

## Insufficient Privileges Error

Ensure:

- Required Microsoft Graph permissions are assigned
- Admin consent has been granted
- The Azure application has Application permissions, not Delegated permissions

## SSL Errors

If SSL verification fails:

- Verify the certificate chain
- Confirm proxy/firewall inspection settings
- Temporarily disable verify\_ssl for testing if permitted by your organisation

You have successfully authenticated the **Azure Active Directory** connector in Swimlane.

### Sources

- Microsoft Graph API Documentation: [https://learn.microsoft.com/en-us/graph/api/overview](https://learn.microsoft.com/en-us/graph/api/overview)
- Microsoft Graph Permissions Reference:
  [https://learn.microsoft.com/en-us/graph/permissions-reference](https://learn.microsoft.com/en-us/graph/permissions-reference)
- Microsoft OAuth 2.0 Client Credentials Flow:
  [https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow](https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow)