Microsoft

1. In the Microsoft Entra admin center, go to App registrations → New registration.
2. Set Redirect URI (type Web) to the Callback URL.
3. Under Certificates & secrets, create a new client secret and copy its value immediately (it's only shown once).
4. Copy the Application (client) ID.
5. In Safeguard, click Add Provider → Microsoft, and enter:
   • Client ID
   • Client Secret
   • Azure Tenant (optional) — use common to allow any Microsoft account, organizations for any work/school account, or a specific tenant ID/domain to restrict sign-in to one organization.
6. Click Save.