> Index of every Falcon docs page, for assistants: https://falcon.com/docs/llms.txt

# Sign in with Microsoft

On Security, Sign in with Microsoft is Our app, your approval (a directory tenant ID and an approval link) or Your own app.

Open **Security** and find **Sign in with Microsoft**. The note is **Choose how your Microsoft 365 accounts sign in.** The two choices are **Our app, your approval** and **Your own app**. Turn on **Google or Microsoft** under **How people sign in** as well. See [How people sign in](https://falcon.com/docs/sign-in-methods). Google has no matching section.

Only a company administrator can change this. Anyone else sees **Only a company administrator can change Microsoft sign-in.** Saving can open **Confirm it's you**, and the line is **Sign in with Microsoft asks for your second step before anything changes.** If you still need to sign in again, the page says **Studio asks again before a change like this. Sign in again, then come straight back.**

## Our app, your approval

- Choose **Our app, your approval**. The note is **Enter your directory's tenant ID, then have an administrator approve the app once.**
- **Directory (tenant) ID** is the value in Microsoft Entra, under Overview. It looks like `00000000-0000-0000-0000-000000000000`. A value that is not that shape says **That isn't a tenant ID. It's 36 characters, in five groups.**
- Choose **Save**. The page says **Saved.**
- **Approval link for your administrator** appears when the directory is saved and not yet approved. **An administrator of your Microsoft directory opens it and approves once. It holds nothing secret, so you can send it to them.** Use **Copy** or **Open**.

| Status | What it means |
|---|---|
| Not set up | No directory is saved yet. |
| Waiting for approval | Nobody from this directory can sign in with Microsoft until it's approved. |
| Approved | People in this directory can sign in. Microsoft sign-ins are only accepted from this directory. |
| Blocked by your directory | Your directory doesn't allow this app. Use your own app instead. |

If this Studio has no Microsoft app to approve, the page says **Microsoft sign-in isn't available on this Studio yet. Its Microsoft app hasn't been registered, so there's nothing to approve. Whoever runs this Studio needs to finish that setup.**

## Your own app

- Choose **Your own app**. The note is **Register an app in your own Microsoft Entra and enter its details.**
- Enter **Directory (tenant) ID** and **Application (client) ID**. The client ID is on your app's Overview in Microsoft Entra. A bad client ID says **That isn't a client ID. It's 36 characters, in five groups.**
- Enter **Client secret**. **Stored encrypted and never shown again. Enter a new one to replace it.** After one is saved the field says **A secret is saved. Enter a new one to replace it.** With none it says **No secret yet.** Leaving it empty on a first save says **Enter the client secret from your app.**
- Copy **Redirect address to register on your app** and register that address on the app.
- Choose **Save**.

If this Studio cannot store the secret, the page says **Your own app can't be saved on this Studio yet: it has nowhere safe to keep the client secret. Use our app for now, or ask whoever runs this Studio.** A refusal from Microsoft says **Microsoft didn't accept those details. Check the tenant ID, client ID and secret.**

## Related

- [How people sign in](https://falcon.com/docs/sign-in-methods)
- [Require a second step](https://falcon.com/docs/require-a-second-step)
- [Verify a work domain](https://falcon.com/docs/verify-a-domain)
- [What a trusted domain does](https://falcon.com/docs/trusted-domain-access)
- [Access levels](https://falcon.com/docs/people-access-levels)
- [Company settings](https://falcon.com/docs/company-settings)