Using Microsoft Entra ID To Authenticate With Model Context Protocol Servers

%%{init: {'theme': 'dark', 'themeVariables': { 'primaryColor': '#1f1f1f', 'primaryTextColor': '#ffffff', 'primaryBorderColor': '#ffffff', 'lineColor': '#ffffff' }}}%% sequenceDiagram participant UA as User Agent (Browser) participant MC as MCP Client participant MS as MCP Server participant EI as Entra ID MC->>MS: Connect MS->>MC: HTTP 401 Unauthorized MC->>MS: /authorize MS->>MC: Return Entra ID /authorize URL MC->>UA: Redirect to browser to auth UA->>EI: Perform auth dance EI->>UA: Auth code to callback UA->>MC: Auth code MC->>MS: Request access token from auth code MS->>EI: Exchange auth code for access token EI->>MS: Access token MS->>MC: Return access token MC->>MC: Store access token MC->>MS: Connect MS->>MC: Good to go!