Configure Azure OAuth

Create an app registration

Open the Microsoft Entra admin center, then go to Identity > Applications > App registrations and select New registration.

Enter a name such as Coolify. Choose the supported account type that matches who may sign in.

Under Redirect URI, select Web and enter:

https://coolify.shadowarcanist.com/auth/azure/callback

Select Register.

Copy the application and tenant IDs

On the app registration Overview page, copy:

• Application (client) ID
• Directory (tenant) ID

For a single-tenant organization, use the Directory tenant ID in Coolify. Microsoft also supports tenant selectors such as organizations, common, or consumers for app registrations configured for those account types.

Create a client secret

Open Certificates & secrets > Client secrets, select New client secret, enter a description and expiration, then select Add.

Copy the secret Value immediately. Do not copy the Secret ID; Coolify needs the secret value.

Confirm Microsoft Graph access

Open API permissions and confirm that the delegated Microsoft Graph permission User.Read is present. Add it if the registration does not already include it.

Apply administrator consent when your Microsoft Entra policies require it.

Configure Azure in Coolify

Open Settings > OAuth and find Azure.

Select Save, then turn on Enabled for Azure.

Verify Azure sign-in

Open the Coolify login page in a private browser window and select Login with Azure. Sign in with an account allowed by the app registration, then confirm that Coolify opens the matching account.