Sign in to Claude Desktop and Claude Code with a Microsoft work account

How do I sign in to Claude with a Microsoft account?

What does the IT admin set up?

1. Register the gateway API in Microsoft Entra

   In the Entra admin center, open App registrations and create a single-tenant registration, for example SC Gateway API. Note its Application (client) ID and your Directory (tenant) ID.

   Under Expose an API, set the Application ID URI to api://<gateway-api-app-id> and add a delegated scope named inference that requires admin consent. In the manifest, set api.requestedAccessTokenVersion to 2.

2. Register the Claude desktop client

   Create a second single-tenant registration, for example Claude for SC. Under Authentication, add the Mobile and desktop applications platform with the redirect URI http://127.0.0.1/callback. No client secret is created or distributed.

   Under API permissions, add the gateway API's delegated inference permission and choose Grant admin consent. In the client's Enterprise application, set Assignment required to Yes and assign the employee group that should use Claude.

3. Prepare the connection in Standard Compute

   Sign in as a company admin, open Resources, then Claude Microsoft sign-in. Enter your tenant ID, the gateway API application ID and the Claude client application ID, then choose Prepare connection. The page walks you through four stages: connection, Microsoft provisioning, member access and Claude.

4. Connect SCIM provisioning from Entra

   In Entra, create a separate non-gallery enterprise application, for example SC Directory Provisioning, and open Provisioning. In Standard Compute choose Create provisioning credential, then paste the Tenant URL and the credential into Entra and choose Test connection.

   In Attribute mapping, map the Entra objectId to SCIM externalId and make it the matching attribute. Scope provisioning to assigned users and groups, assign the employee group and start provisioning.

5. Approve groups and activate access

   Back in Standard Compute, select the synchronized Entra group, set the maximum number of managed members and save the access rules. Check Microsoft's provisioning logs, then activate the connection.

6. Deploy the Claude configuration

   Choose Download connection settings (JSON) and add the values to your managed Claude configuration in Intune, Group Policy or your MDM, next to the Claude policies you already have.

   {
     "inferenceProvider": "gateway",
     "inferenceCredentialKind": "interactive",
     "inferenceGatewayBaseUrl": "https://eu.stdcmpt.com/entra/<company-connection-id>",
     "inferenceGatewayAuthScheme": "bearer",
     "inferenceGatewayOidcAuthFlow": "browser",
     "inferenceGatewayOidc": {
       "issuer": "https://login.microsoftonline.com/<tenant-id>/v2.0",
       "clientId": "<claude-client-application-id>",
       "bearerTokenType": "access_token",
       "scopes": "openid profile offline_access api://<gateway-api-application-id>/inference",
       "appendOfflineAccess": true
     }
   }

7. Give each employee a budget

   Standard Compute creates each employee's company key on their first sign-in. Assign a plan to that key in People & keys; that plan is the person's monthly budget.

Create a company workspaceRead the full admin guide

What does the employee do?

1. Install Claude Desktop

   Install Claude from claude.com/download or from your company's software catalog.

2. Reopen Claude once IT's settings arrive

   If Claude was already running when the managed settings reached the device, quit it fully and open it again.

3. Choose Sign in with your organization

   Claude opens your company's Microsoft sign-in page in the browser.

4. Sign in with your Microsoft work account

   Use your usual work email and sign-in method. The browser hands you back to Claude, which shows the models your company approved for you.

How do I restrict Claude sign-in to my company's Microsoft tenant?

How do budgets and model allow-lists apply to people who sign in with Microsoft?

Do we also need single sign-on for the Standard Compute dashboard?

How does Anthropic's own Claude Team and Enterprise SSO work?

When should we choose Claude Enterprise and when Standard Compute?

What else do IT and security teams ask?

Do employees need a Claude Team or Enterprise seat?

No. With this setup Claude Desktop sends requests to Standard Compute, and each employee uses their own company key with its own monthly budget.

Do we have to hand out API keys?

No. Employees sign in with their Microsoft work account, so there are no API keys to hand out or rotate on laptops.

Can we use Okta or Google Workspace instead of Microsoft?

Claude sign-in through Standard Compute uses Microsoft Entra ID. Dashboard single sign-on works with Microsoft Entra ID or any SAML identity provider, such as Okta.

Who in our company does the setup?

A company administrator sets it up in the Standard Compute dashboard together with your Microsoft Entra admin. An IT partner can do it on your behalf in your own tenant.

Is a client secret involved?

No. The Claude client is a public desktop app registration with a loopback redirect, and Claude handles the browser sign-in and token refresh.

Where are requests processed?

Microsoft sign-in runs through our EU gateway, which terminates TLS and runs in Finland. Your account data is stored in Frankfurt. Add a Europe rule and every request is served only by approved European inference endpoints.

What does it cost?

Microsoft sign-in for Claude needs the Single sign-on feature, on its own or with Enterprise, and each employee's key has its own monthly plan. See pricing.

Related pages

• Single sign-on for AI tools with Microsoft Entra ID
• Claude Code for teams
• How to give employees secure access to Claude
• Claude rate limits for teams
• Standard Compute for companies
• Security

Sources, checked on 9 November 2026

1. Anthropic: set up single sign-on (SSO)
2. Anthropic: Microsoft Entra ID SSO setup
3. Anthropic: set up JIT or SCIM provisioning
4. Anthropic: claim and migrate accounts on your domain
5. Anthropic: Claude plans and pricing
6. Claude Code: authentication
7. Claude Desktop: gateway sign-in with your identity provider
8. Microsoft: provision users and groups with SCIM
9. Standard Compute docs: Claude with Microsoft sign-in
10. Standard Compute docs: website single sign-on