> For the complete documentation index, see [llms.txt](https://docs.fortifiedid.se/entraid/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fortifiedid.se/entraid/readme.md).

# EntraID

{% hint style="info" %}
**Module name:** `EntraID`
{% endhint %}

The module communicates with Microsoft Graph using certificate-based client credentials. Configure either a certificate file or a keystore-backed certificate and private key.

{% tabs %}
{% tab title="Properties" %}

<table><thead><tr><th>Name</th><th>Description</th><th>Default</th><th data-type="checkbox">Mandatory</th></tr></thead><tbody><tr><td><code>namespace</code></td><td>Namespace used to correlate module requests and valves.</td><td></td><td>false</td></tr><tr><td><code>http_client_name</code></td><td>Name of the HttpClient destination.</td><td><code>"default"</code></td><td>false</td></tr><tr><td><code>client_id</code></td><td>Entra application/client ID.</td><td></td><td>true</td></tr><tr><td><code>tenant_id</code></td><td>Entra tenant ID.</td><td></td><td>true</td></tr><tr><td><code>assertion_ttl</code></td><td>Lifetime of the signed client assertion in milliseconds.</td><td><code>5000</code></td><td>false</td></tr><tr><td><code>certificate_file_path</code></td><td>Path to a PKCS12 certificate file. When set, this certificate source is used instead of <code>keystore</code>.</td><td></td><td>false</td></tr><tr><td><code>certificate_alias</code></td><td>Certificate alias in <code>certificate_file_path</code>.</td><td><code>"1"</code></td><td>false</td></tr><tr><td><code>certificate_password</code></td><td>Password for <code>certificate_file_path</code>.</td><td><code>""</code></td><td>false</td></tr><tr><td><code>keystore</code></td><td>Keystore object containing the certificate and private key. Required when <code>certificate_file_path</code> is not configured.</td><td></td><td>false</td></tr><tr><td><code>keystore_alias</code></td><td>Key alias in the keystore.</td><td><code>"1"</code></td><td>false</td></tr><tr><td><code>keystore_password</code></td><td>Keystore key password when the keystore source is used.</td><td></td><td>false</td></tr><tr><td><code>audit.create</code></td><td>Record successful create operations in audit.</td><td><code>false</code></td><td>false</td></tr><tr><td><code>audit.update</code></td><td>Record successful update operations in audit.</td><td><code>false</code></td><td>false</td></tr><tr><td><code>audit.delete</code></td><td>Record successful delete operations in audit.</td><td><code>false</code></td><td>false</td></tr></tbody></table>
{% endtab %}

{% tab title="Certificate file example" %}

```json
{
  "name": "EntraID",
  "config": {
    "namespace": "default",
    "http_client_name": "default",
    "client_id": "b6e27dbf-8bb8-49bf-a2a0-3a32140b045a",
    "tenant_id": "9576dfaf-0f8a-49d9-982e-40839345c6bc",
    "assertion_ttl": 5000,
    "certificate_file_path": "/path/to/certificate.pfx",
    "certificate_alias": "1",
    "certificate_password": "password",
    "audit": {
      "create": true,
      "update": true,
      "delete": true
    }
  }
}
```

{% endtab %}
{% endtabs %}