The Stytch B2B Microsoft OAuth product limits access to only verified Azure Active Directory accounts. Personal accounts, including personal Xbox Live, Skype, or Outlook accounts, are not allowed. Accounts managed by Azure Active Directory B2C are not allowed.By default, Stytch will deduplicate users by treating their
UserPrincipalName as an email address.Create a new Microsoft OAuth client
Create a Microsoft Azure account
If you don’t have one already, create a Microsoft Azure account.
Navigate to Azure Active Directory
Go to Azure Active Directory to create a Microsoft application.
Select account type
Select Accounts in any organizational directory (Any Azure AD directory - Multitenant).

Configure the Redirect URI
Under the Redirect URI section, select Web and then copy the Stytch redirect URI from the OAuth page and paste it into the URI field.

Configure your Microsoft OAuth client in Stytch
Navigate to your Microsoft application
Go to Azure Active Directory and select your Microsoft application.
Add a redirect URI
In your OAuth client configuration, select the link next to the Redirect URIs section. Then select Add a platform and finally select Web.

Configure the Stytch redirect URI
Copy the Stytch redirect URI from the Dashboard and paste it into the URI field.

