> ## Documentation Index
> Fetch the complete documentation index at: https://docs.encoreos.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Entra ID Deployment Checklist

> Use this checklist before enabling Entra provisioning for an organization.

Use this checklist before enabling Entra provisioning for an organization.

## Required Supabase Edge Secrets

* `ENTRA_APP_ID` (or `ENTRA_TEST_APP_ID` in non-production)
* `ENTRA_CLIENT_SECRET` (or `ENTRA_TEST_CLIENT_SECRET` in non-production)
* `SUPABASE_URL`
* `SUPABASE_SERVICE_ROLE_KEY`

## Required Database Objects

* Table: `pf_oauth_state` (used by admin consent state validation)
* Table: `pf_organizations` with Entra columns:
  * `entra_enabled`
  * `entra_tenant_id`
  * `entra_app_id`
  * `entra_domain`
  * `entra_consent_url`
  * `entra_consent_granted_at`
  * `entra_provisioning_enabled`
  * `entra_secret_expires_at`

## Runtime Verification

Call `entra-register-app` with:

* `action: "check-config"` to validate secret presence and DB accessibility.
* `action: "test-connection"` to validate token acquisition and Microsoft Graph reachability.