Microsoft Entra ID

Live 68 Actions 6 Events

Microsoft Entra ID Integration for AI Agents

Connect your AI agent to 68 Microsoft Entra ID actions via MCP, A2A, or SDK, with agent authentication, tool-calling execution, and security built-in, plus 6 events to subscribe to.

Start Free Book Demo Microsoft Entra ID MCP Server

Microsoft Entra ID AI Agent Actions

68 production-ready actions for your agent to do more on Microsoft Entra ID.

Read the Microsoft Entra ID docs Watch AI Onboarding Demo

68 Actions

List Users - Retrieve a list of all users in the Microsoft Entra ID directory

Get User - Retrieve the properties and relationships of a specific user by ID or userPrincipalName

Create User - Create a new user in Microsoft Entra ID directory

Update User - Update the properties of a user in Microsoft Entra ID

Delete User - Delete a user from Microsoft Entra ID directory

List Groups - Retrieve a list of all groups in the Microsoft Entra ID directory

Get Group - Retrieve the properties of a specific group by ID

Create Group - Create a new group in Microsoft Entra ID

Update Group - Update the properties of a group in Microsoft Entra ID

Delete Group - Delete a group from Microsoft Entra ID

List Group Members - Retrieve the members of a group

Add Group Member - Add a member to a group

Remove Group Member - Remove a member from a group

List Organizations - Retrieve a list of organizations (tenants) associated with the authenticated user

Get Organization - Retrieve the properties of a specific organization (tenant) by ID

Update Organization - Update the properties of a specific organization (tenant)

List Applications - Retrieve a list of application registrations in Microsoft Entra ID

Get Application - Retrieve the properties of a specific application by ID

Create Application - Create a new application registration in Microsoft Entra ID

Update Application - Update the properties of an application in Microsoft Entra ID

Delete Application - Delete an application from Microsoft Entra ID

List Directory Roles - Retrieve a list of activated directory roles in Microsoft Entra ID

Get Directory Role - Retrieve the properties of a specific directory role by ID

List Directory Role Members - Retrieve the members of a directory role

Add Directory Role Member - Add a member to a directory role

Remove Directory Role Member - Remove a member from a directory role

List Role Templates - Retrieve a list of all directory role templates in Microsoft Entra ID

List Service Principals - Retrieve a list of service principals (enterprise applications) in Microsoft Entra ID

Get Service Principal - Retrieve the properties of a specific service principal by ID

Create Service Principal - Create a new service principal for an application in Microsoft Entra ID

Update Service Principal - Update the properties of a service principal in Microsoft Entra ID

Delete Service Principal - Delete a service principal from Microsoft Entra ID

List Service Principal App Role Assignments - Retrieve app role assignments granted to a service principal

Add App Role Assignment To Service Principal - Grant an app role to a service principal

Remove App Role Assignment From Service Principal - Remove an app role assignment from a service principal

List Conditional Access Policies - Retrieve a list of all conditional access policies in Microsoft Entra ID

Get Conditional Access Policy - Retrieve the properties of a specific conditional access policy by ID

Create Conditional Access Policy - Create a new conditional access policy in Microsoft Entra ID

Update Conditional Access Policy - Update the properties of a conditional access policy in Microsoft Entra ID

Delete Conditional Access Policy - Delete a conditional access policy from Microsoft Entra ID

List Named Locations - Retrieve a list of named locations used in conditional access policies

Get Named Location - Retrieve the properties of a specific named location by ID

Create IP Named Location - Create a new IP-based named location for conditional access

Create Country Named Location - Create a new country-based named location for conditional access

Delete Named Location - Delete a named location from Microsoft Entra ID

List Domains - Retrieve a list of domains associated with the Microsoft Entra ID tenant

Get Domain - Retrieve the properties of a specific domain by domain name

Create Domain - Add a new domain to Microsoft Entra ID

Delete Domain - Delete a domain from Microsoft Entra ID

Verify Domain - Verify a domain in Microsoft Entra ID

List Domain Verification DNS Records - Retrieve DNS records required to verify domain ownership

List Domain Service Configuration Records - Retrieve DNS records needed for services using the domain

List Devices - Retrieve a list of devices registered in Microsoft Entra ID

Get Device - Retrieve the properties of a specific device by ID

Create Device - Create and register a new device object in Microsoft Entra ID

Update Device - Update the properties of a device in Microsoft Entra ID

Delete Device - Delete a device from Microsoft Entra ID

List Device Registered Owners - Retrieve the registered owners of a device

List Device Registered Users - Retrieve the registered users of a device

List Device Group Memberships - Retrieve the groups that a device is a member of

List OAuth2 Permission Grants - Retrieve a list of delegated permission grants in Microsoft Entra ID

Get OAuth2 Permission Grant - Retrieve a specific OAuth2 permission grant by ID

Create OAuth2 Permission Grant - Create a new OAuth2 permission grant (delegated permission consent)

Update OAuth2 Permission Grant - Update an existing OAuth2 permission grant

Delete OAuth2 Permission Grant - Delete an OAuth2 permission grant (revoke delegated permission consent)

List User App Role Assignments - Retrieve app role assignments for a specific user

Assign App Role To User - Assign an app role to a user

Remove App Role From User - Remove an app role assignment from a user

Microsoft Entra ID Webhook Events

6 real-time Microsoft Entra ID events your AI agent can subscribe to.

Webhooks for AI agents Read the Microsoft Entra ID docs

6 Events

Validation Check Responds to Microsoft Graph subscription validation by returning the validationToken as plain text.
Subscription Lifecycle Notification Acknowledges Microsoft Graph subscription lifecycle notifications.
User Updated Fired when a user is created, changed, soft-deleted or restored.
User Deleted Fired when a user is permanently deleted.
Group Updated Fired when a group is changed, has members added or removed, or is soft-deleted or restored.
Group Deleted Fired when a group is permanently deleted.

Microsoft Entra ID AI Agent Use Cases

Connect your AI agent to Microsoft Entra ID and help your team scale the HR operations they run by hand today.

Employee Onboarding

Use StackOne to connect your AI agent to your HRIS, identity management, and LMS to automate employee onboarding.

View

HR Policy Q&A Chatbot

Use StackOne to connect your AI agent to your HRIS, knowledge base, and messaging tools to automate HR policy Q&A.

View

Employee Offboarding

Use StackOne to connect your AI agent to your HRIS, identity management, and ITSM to automate employee offboarding and deprovisioning.

View

More HRIS & HCM use cases

Do More, Build Less

Integration Infrastructure for Microsoft Entra ID AI Agents

Multiple Interfaces

Access integrations via API, AI SDKs, MCP & A2A.

Microsoft Entra ID MCP server

Managed Authentication

Pre-built authentication UI.

Agent auth

Falcon Engine

Every Microsoft Entra ID action runs on Falcon.

Agent Execution Engine

StackOne Defender

88.7% prompt injection detection.

Prompt injection defense

Start Free Book a Demo

"What impressed us most about StackOne is its ambition and clarity. They're creating infrastructure that modern software and the entire AI agent ecosystem can rely on. The depth of secure integrations, the pace of delivery, and the team's foresight into AI's future uniquely position StackOne to redefine this category."

Luna Schmid, Partner at GV

"We've been impressed by how quickly and deeply StackOne integrates with complex enterprise systems -- and now, with their focus on agent-to-agent interoperability, they're unlocking even more powerful use cases for customers. StackOne delivers all of the above in a universal layer -- without compromise."

Barbry McGann, SVP at Workday Ventures

Product Teams Love Building Agent Integrations With StackOne

Agentic Automation

A US medical research organisation

Case Study How a US Medical Research Organisation Connected Nine Systems to Its AI Agents in Under Two Weeks

Agentic Automation

Case Study How TYME Technologies scaled outbound 10× with agentic integrations

IAM Permissions API

Case Study How Drata Broadened User Access Review Integrations through StackOne

Connectors for workflow builders

Case Study Introist uses StackOne to Launch New Enterprise-Grade Integrations and Expand Automation for HR Teams

Agentic Connectors

Case Study How Popp Built a Recruitment AI Agent with Enterprise ATS Integration in Weeks

Scroll to explore

More Security Integrations Like Microsoft Entra ID

Cloudflare

150+ actions

OneLogin

119+ actions

Okta

115+ actions

Auth0

87+ actions

JumpCloud

78+ actions

Snyk

71+ actions

Sentinel XS

69+ actions

Explore more Security integrations

Microsoft Entra ID AI agent integration resources

Webhooks for AI agents: why agentic workflows need them purpose-built

AI agents can act the moment a system changes, using webhooks. But webhooks built for software hit three limits in agentic workflows. Here is how to fix each.

7 min read

Unified API Limitations for AI Agent Integration: 7 Ways They Break

Unified APIs work for traditional software but fail AI agents in specific, measurable ways. Here are 7 problems we found after building both approaches, with examples from Workday, Greenhouse, Jira, and Salesforce.

14 min

Agentic Context Engineering: Why AI Agents Kill Their Own Context Windows

AI agents exceed their context windows without knowing it. Six failure patterns and seven survival architectures for agentic context engineering.

15 min

MCP Code Mode: Keeping Tool Responses Out of Agent Context

Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.

11 min

Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery

Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.

10 min

Microsoft Entra ID integration FAQ

Do I need to create my own auth app to connect Microsoft Entra ID to StackOne?

Yes, you need an auth app inside Microsoft Entra ID. Microsoft calls this an "App registration." Once registered with the StackOne redirect URI and Microsoft Graph permissions, paste the Client ID and Secret into the StackOne dashboard auth config for the Microsoft Entra ID connector. The Tenant variant additionally requires a Directory (tenant) ID. See the Microsoft Entra ID auth docs.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.

Start Free Book Demo