April 16, 2026
AgentKit

Microsoft 365 and Azure: single-tenant Azure AD app registrations now fully supported

Most enterprise Microsoft 365 deployments use single-tenant Azure AD app registrations. Single-tenant support unblocks agents connecting to M365, Teams, SharePoint, and Graph API without requiring IT to make a policy exception.

Most enterprise Microsoft 365 and Azure deployments use single-tenant Azure AD app registrations. Multi-tenant app support alone isn't enough for enterprise Microsoft integrations where security policies prohibit cross-tenant app consent. Single-tenant support unblocks the enterprise segment.

Microsoft Single-Tenant

An enterprise IT agent monitors Microsoft Teams channels for incident reports and auto-creates Jira tickets. The enterprise's Azure AD admin registers a single-tenant app. Scalekit handles the single-tenant OAuth flow correctly — the agent connects to the customer's M365 tenant without requiring a multi-tenant app registration policy exception from IT.

What's included

  • Full single-tenant OAuth flow — token exchange, refresh, and connected account management.
  • Unlocks Microsoft Teams, SharePoint, OneDrive, Exchange, and Graph API for enterprise deployments.
  • No multi-tenant app registration policy exception required from enterprise IT.
  • Same connector model as all other Microsoft integrations — consistent for developers.
Share on

Microsoft 365 and Azure: single-tenant Azure AD app registrations now fully supported

Most enterprise Microsoft 365 and Azure deployments use single-tenant Azure AD app registrations. Multi-tenant app support alone isn't enough for enterprise Microsoft integrations where security policies prohibit cross-tenant app consent. Single-tenant support unblocks the enterprise segment.

Microsoft Single-Tenant

An enterprise IT agent monitors Microsoft Teams channels for incident reports and auto-creates Jira tickets. The enterprise's Azure AD admin registers a single-tenant app. Scalekit handles the single-tenant OAuth flow correctly — the agent connects to the customer's M365 tenant without requiring a multi-tenant app registration policy exception from IT.

What's included

  • Full single-tenant OAuth flow — token exchange, refresh, and connected account management.
  • Unlocks Microsoft Teams, SharePoint, OneDrive, Exchange, and Graph API for enterprise deployments.
  • No multi-tenant app registration policy exception required from enterprise IT.
  • Same connector model as all other Microsoft integrations — consistent for developers.
Schedule a demo with Scalekit today.