Microsoft Entra ID
Shares rank 5 of 12 identity providers by recommenders
Recommended for reliable enterprise sign-in and cross-platform deployment, though critics cite phishing exposure and recurring design-level security bugs.
Recommended for reliable enterprise sign-in and cross-platform deployment, though critics cite phishing exposure and recurring design-level security bugs.
34 people gave an opinion
- recommend it
- 8
- criticize it
- 26
- approval share
- 24%
Recommended in 5 of 13 months
- November 2025: not recommended
- December 2025: recommended
- January 2026: not recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: not recommended
- May 2026: not recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: not recommended
- September 2026: not recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 8 people recommend itNeeds 10 or more, not met.
- 0.3 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 5 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Reliable authentication in practice
“AD/Entra is pretty good in my experience working with it.”
Comment from 18 Dec 2025 in “Ask HN: Self-hosted AD/Entra ID alternative that works with Windows and Linux?” “simply enjoying the reliable authentication everywhere”
Comment from 8 Feb 2026 in “Microsoft Account bugs locked me out of Notepad – are Thin Clients ruining PCs?” Good for cross-platform cloud deployment
“Microsoft has definitely made it easier for cross-platform deployment with Entra ID”
Comment from 19 Dec 2025 in “Ask HN: Self-hosted AD/Entra ID alternative that works with Windows and Linux?” “They're great at some cloud stuff (AAD/EntraID/Office/MDM)”
Comment from 5 Jun 2026 in “Ask HN: Is Azure capacity this constraind or am I doing it wrong?”
What people warn about
Each mark is one comment
Design-level security bugs and phishing risk
“One of the reasons Entra is so easily phishable is Microsoft uses like 500 different domains for their cloud platform”
Comment from 23 Sep 2026 in “SAML: A fractal of bad design” “Entra ID is full of design-level bugs that allow full tenant takeover”
Comment from 18 Sep 2026 in “A heap overflow and SSO misconfiguration to compromise OpenAI internal repos” “Entra ID is full of disastrous design-level bugs like this one.”
Comment from 11 Apr 2026 in “France's government is ditching Windows for Linux, says US tech a strategic risk” Sign-in problems with passkeys and sessions
“there's no way for me to actually pass the passkey to Entra, so I end up clicking things multiple times”
Comment from 15 Oct 2026 in “Passkeys are not a trap” “have you tried logging into your EntraID Microsoft Teams for Xbox account lately?”
Comment from 27 May 2026 in “Incident with Pull Requests, Issues, Git Operations and API Requests” “at one point even private browser mode would still have me logged in to Entra ID”
Comment from 19 Mar 2026 in “Federal Cyber Experts Called Microsoft's Cloud "A Pile of Shit", yet Approved It” Partial outages and eventual consistency
“The cloud services each had partial outages where I was met with 'Data not available at this time'”
Comment from 23 Jul 2026 in “Ask: Why does everything Microsoft create lately feel fragile and half-baked?” “We build polling where we polled Entra Id for minutes until it became “eventually” consistent”
Comment from 3 Apr 2026 in “Decisions that eroded trust in Azure – by a former Azure Core engineer” Missing dynamic client registration support
“I COULD in theory support dynamic client registration, but of course Microsoft Entra doesn't.”
Comment from 19 Jun 2026 in “Zero-Touch OAuth for MCP” “Entra ID doesn't support DCR, and the state of the ecosystem here is suboptimal.”
Comment from 19 Jun 2026 in “Zero-Touch OAuth for MCP”
Other identity providers people recommend
The four most recommended other identity providers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
See all 12 identity providers, rankedWhat people said
33 of the 41 comments that mention it, newest first. Each links to the original comment.
“there's no way for me to actually pass the passkey to Entra, so I end up clicking things multiple times”
“One of the reasons Entra is so easily phishable is Microsoft uses like 500 different domains for their cloud platform”
“Entra is just allowing the Chinese government in your environment.”
“Entra ID is full of design-level bugs that allow full tenant takeover”
“you have EntraID with a hieracy which is sort of automated by HR data, but not really”
“The cloud services each had partial outages where I was met with 'Data not available at this time'”
“All of the following products and services are fantastic in 2026”
“If the price is the only incentive, I'd stay away from Entra ID”
“EntraID is a bit of a burning dumpster fire”
“Entra ID doesn't support DCR, and the state of the ecosystem here is suboptimal.”
“I COULD in theory support dynamic client registration, but of course Microsoft Entra doesn't.”
“They're great at some cloud stuff (AAD/EntraID/Office/MDM)”
“have you tried logging into your EntraID Microsoft Teams for Xbox account lately?”
“You cannot reliably block Microsoft Entra device code flow without Entra ID Premium P1.”
“Entra ID is full of disastrous design-level bugs like this one.”
“We build polling where we polled Entra Id for minutes until it became “eventually” consistent”
“the equivalent of EntraID for consumers, a Microsoft account that is never tied to the advertising ecosystem”
“To this day I still see gaps in their logging”
“at one point even private browser mode would still have me logged in to Entra ID”
“I ripped Entra ID from one of our projects and replaced it with Keycloak.”
“It's the only one I can remember routinely having issues with.”
“1000s of features and none of them really work the way they are supposed to.”
“After configuring it, my colleagues could not log in.”
“Same goes for company Windows PCs set up with Microsoft Entra ID.”
“Dedicated IDPs are better than Entra AD.”
“you are paying for the cloud software but still have to manage your own servers”
“Microsoft Entra ID supports none of them.”
“simply enjoying the reliable authentication everywhere”
“Entra ID sounds like something completely unrelated.”
“Microsoft has definitely made it easier for cross-platform deployment with Entra ID”
“AD/Entra is pretty good in my experience working with it.”
“unsubscribe functionality also doesn't do anything, evidently”
“buttons that don't do what they say they do, ever.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.