How it works

With your instance deployed, redirect users to:

https://YOUR_HANDSHAKE_INSTANCE_URL/auth/HANDLER_ID/redirect

Where HANDLER_ID is either microsoft-entra-id or the value passed to the optional id argument of the MicrosoftEntra() factory. (See Options below.)

Handshake will take each user through the Microsoft Entra ID OAuth flow and before sending them back to you, at the URL specified by the callback_uri query parameter.

Options

Modify your app/options.ts file to include the MicrosoftEntra() handler like so:

import { Entra } from "handshake";
 
Entra({
  clientId: string,
  clientSecret: string,
  scopes: [
    "openid",
    "https://graph.microsoft.com/User.Read",
    "https://graph.microsoft.com/Mail.Send",
  ],
});

Consult the reference to learn about HandshakeOptions.

Provider setup

Configure the Redirect URI

Ensure your app is configured in the Azure portal under Authentication with the following redirect URI:

https://YOUR_APP_URL/auth/microsoft-entra-id/callback

Troubleshooting

Facing an issue making Microsoft Entra ID work? Open an issue on GitHub to get help.