The Microsoft plugin signs FileRun users in with their Microsoft work or school accounts, held
in Microsoft Entra ID (formerly Azure Active Directory).
Enable and configure the plugin from the control panel, under Users → Authentication.
Select Microsoft from the Enabled plugin list.
In the Azure portal, open Microsoft Entra ID → App registrations and register a new application.
Add a Web redirect URI. FileRun shows the exact value in the Redirect URL field of the
plugin's settings; copy it from there with the button next to the field.
FileRun shows this URL with the
!character written as%21, which is how Azure stores it. Enter it exactly as FileRun shows it: typing the raw!makes the Azure form refuse the URL.
Then create a client secret for the registration, under Certificates & secrets. Copy its value straight away — Azure shows it only once.
Three values, all from the app registration's Overview and Certificates & secrets pages:
Application (client) IDSecret — the value of the client secret, not its IDDirectory (tenant) IDUse the Save and test authentication button before enabling the plugin. Open the test link in a
private browser window, so it does not disturb your current FileRun session.
Keep
Allow local user accounts to log inenabled until you are sure the setup works, so that the FileRun superuser can still sign in with its own password. If you are locked out, follow Disabling the authentication integration.
Microsoft Entra ID is also an OpenID Connect provider, so the OpenID Connect plugin can be
used with it. That plugin can additionally sign users out at the provider and accept back-channel
logout. The Microsoft plugin is the simpler of the two to set up.