SECURITY Signal 238
Vercel Connect now supports Microsoft
↗
Vercel Connect now offers a managed Microsoft connector that registers the Entra application and configures federated credentials automatically, letting apps access Microsoft Graph APIs without managing client secrets.
Engineers integrating with Microsoft products no longer need to create app registrations in Entra or manage client secrets. Short-lived, automatically refreshed tokens scoped to each request reduce the risk of credential leaks and remove the operational burden of secret rotation.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Vercel registers the Entra application and configures federated credentials, removing the need for manual app registration or client secret management.
The @vercel/connect SDK returns short-lived tokens authenticated via the deployment's OIDC identity, with automatic refresh and no secrets to rotate.
Tokens support two subject types: application-level permissions granted by an admin, or user-level delegated permissions that act as a specific person.
THE CLUSTER