Set Up Microsoft Identity Provider Authentication in Power Pages

In this Power Pages tutorial, I will show you how to configure Microsoft Identity Provider authentication step-by-step. Using Microsoft Entra ID (formerly Azure Active Directory), you can allow users to log in to your Power Pages site with their Microsoft work or school accounts. This makes your site more secure and user-friendly, especially if you’re building internal portals or partner-facing applications.

Power Pages supports various types of identity providers, including Azure AD, Microsoft personal accounts, Google, LinkedIn, and more. But in this post, we’ll focus only on Microsoft Identity Providers. You’ll learn how to register an app in the Azure portal, connect it to Power Pages, and test the login experience.

If you’re a beginner working with Power Pages authentication, this guide is a great place to start.

Microsoft Identity Provider Authentication in Power Pages

Identity Providers (IdPs) are services that handle user authentication and authorization. In Power Pages, an identity provider verifies a user’s identity and allows them to sign in to your site securely.

When you enable authentication in Power Pages, you can connect your site to different identity providers like Microsoft Entra ID (formerly Azure AD), personal Microsoft accounts, Google, Facebook, LinkedIn, or even custom providers using SAML or OAuth 2.0.

Power Pages uses the Power Pages authentication model to manage login flows and user identities. Once a user signs in through an identity provider, they are linked to a Contact record in Dataverse. This contact record is how Power Pages manages user roles, permissions, and access to data.

You can configure multiple identity providers for a single site. This is particularly helpful when your site serves different types of users, such as employees logging in with Entra ID and customers using their Google or Microsoft personal accounts.

Types of Identity Providers Supported in Power Pages

Power Pages supports multiple types of identity providers to handle authentication for various user scenarios. You can select one or more options based on your target audience, such as employees, customers, partners, or the general public.

Here are the identity provider types available in Power Pages:

Name	Provider Type
Local sign in	Local sign in
Microsoft Entra ID	Microsoft Entra ID (Work/School)
Microsoft Entra External ID	Microsoft Entra External ID
Azure Active Directory B2C	Azure AD B2C
Facebook	OAuth 2.0
LinkedIn	OAuth 2.0
Google	OAuth 2.0
Twitter	OAuth 2.0
Microsoft	Microsoft Accounts (MSA)

Check Out: Create Multi-Agent in Copilot Studio

Why Use Microsoft Identity Providers in Power Pages?

Microsoft Identity Providers, such as Microsoft Entra ID (formerly Azure AD) and Microsoft personal accounts, enable users to sign in using their existing Microsoft credentials. This simplifies the login process and improves the overall security of your Power Pages site.

By using these providers, you don’t have to manage usernames or passwords manually. Users can log in using accounts they already trust, and you can easily control who gets access, whether it’s internal staff, partners, or external users.

It also supports features like Single Sign-On (SSO), multi-factor authentication (MFA), and integration with Microsoft 365. This makes Microsoft Identity Providers the best choice for internal business portals, secure apps, or partner collaboration sites.

Steps to Set Up Microsoft’s Identity Provider in Power Pages

Now I will show you how to set up Microsoft authentication (using Microsoft Entra ID) in Power Pages. Follow these steps:

• Enable authentication on your Power Pages site
• Register your site as an app in Microsoft Entra ID (Azure AD)
• Configure the Microsoft identity provider in Power Pages

Enable authentication on your Power Pages site

1. Open Power Pages Studio. Select your site -> click Security -> choose Identity providers.

2. At the top, click Authentication settings. Toggle the External login switch to On. Click Save.

Register your site as an app in Microsoft Entra ID

To securely allow users to log in with Microsoft accounts, your site must be registered as an application in Microsoft Entra ID. This generates the credentials Power Pages needs to communicate with Microsoft’s authentication system.

Now follow the steps below:

1. Go to the Azure Portal. Select “Microsoft Entra ID“.

2. Expand Manage and click on “App Registration” from the left navigation pane.

3. Click on “+ New Registration“. Then, enter the following details:
   • Name – Give it a name. Example – Power Pages Microsoft Login
   • Who can use this application or access this API? – Select any option as per your need. Here, I am selecting for “Accounts in this organizational directory only (MSFT Technologies only – Single tenant)”.
   • Redirect URL – Select web and paste the below URL:

https://clientsupport.powerappsportals.com/signin-microsoft

Read More: Add Copilot Studio Knowledge Files Using Power Automate

3. Click on “Register“.

4. After the app is created, copy the “Application (client) ID” and save it for later. You’ll need them in the next step.

You’ll need them in the next step.

See: Use SharePoint List as Knowledge in Copilot Studio

Create a Client Secret ID

1. Click on “Certifications and secrets“. Then, click “+ New client secret“.

2. Give a description and set the expiration duration. Then, Select Add.

3. Now, copy the Value and save it for later. You’ll need them in the next step.

Configure the Microsoft Identity Provider in Power Pages

This step links your Azure-registered app to the Power Pages site. Power Pages uses this information to authenticate users through Microsoft.

1. Return to Power Pages Studio -> Identity providers. Find Microsoft and click Configure.

2. Click on “Next“.

3. Paste the Client ID and Client secret we copied from Azure. Then, click “Confirm” and close.

Check out: How To Create A Form In Power Pages

Test the Microsoft Sign-In in Power Pages

Testing ensures everything is set up correctly. It also confirms whether users can sign in using their Microsoft accounts and whether the login redirects and contact record creation are working.

Follow the steps below:

1. Then click Sync to update the changes.
2. After that, click the Sign in button.

3. Choose Microsoft from the available login options.

Log in using your Microsoft work or school account.

In this Power Pages tutorial, we learned how to configure Microsoft Identity Provider using Microsoft Entra ID (formerly Azure Active Directory). You saw how to enable authentication, register your site in Azure, and connect it to Power Pages using client credentials.

By enabling Microsoft authentication, you can allow users to sign in securely using their work or school accounts. This enhances security, streamlines user access, and provides you with greater control over who can interact with your site.

Also, you may like some more tutorials:

• Rename SharePoint List Using Power Automate
• Set Up Google Login in Power Pages
• Check if SharePoint List Already Exists in Power Automate
• Get and Delete a SharePoint list view using Power Automate
• Disable Title As Mandatory Field From SharePoint List Using Power Automate