Microsoft

Need a hand? Setting up developer credentials can sometimes feel a bit overwhelming. We offer a complimentary 15-minute onboarding session to help you get this configured perfectly. Book your session with a specialist here


When you first install Bread & Butter, the Microsoft 1-click connection is pre-configured in Sandbox Mode. This allows you to instantly test your widgets, but it means visitors will see Bread & Butter’s name on the Microsoft connection screen instead of yours.

To maximize user trust and prevent conversion drop-off, you must transition Microsoft out of the sandbox. By setting up an application in your Azure Portal, you can generate your own credentials so buyers see your brand when they click "Continue with Microsoft."

Here is how to set it up in five steps.


Step 1: Create Your Azure App Registration

  1. Log in to your Azure Portal.
  2. Under "Azure services," click on App registrations. If it is not immediately visible, click "more services" and search for it.
  3. Click New Registration.


Step 2: Configure Your Application

This dictates who is allowed to connect to your widgets.

  1. Enter a Name for your application, ideally using your organization's name.
  2. For supported account types, select Multitenant.

⚠️ Important: This is crucial. Selecting "Multitenant" allows any standard Microsoft user to authenticate and sign in. "Single Tenant" restricts login access strictly to employees on your own domain.

  1. Set the Redirect URI dropdown to Web and paste the following exact link: https://api.breadbutter.io/callback

  2. Click Register.
  3. Once created, copy and save the Application (client) ID—you will need this for the final setup step.

Step 3: Generate Your App Credentials

  1. In the left menu under Manage, click on Certificates & secrets, then click New client secret.
  2. Enter a description, set your desired expiration timeframe, and click Add.

⚠️ Important: Copy and store the Secret Value immediately. If you navigate away, the value will be hidden forever and you will have to generate a new secret. Also, be sure to set a calendar reminder to replace this secret before it expires, otherwise, your users will suddenly lose the ability to log in.


Step 4: Add Your Branding

  1. In the left menu, click on Branding & properties.
  2. Enter your Privacy Policy URL, Terms of Service URL, and any other branding options you would like displayed to your users.
  3. On the same page, add your MPN ID (Partner ID) to verify yourself as the publisher. (Note: You can come back and complete this step later, but your app will display a scary "Unverified" warning to your users until you do).

    For more information on joining, check out Microsoft's Partner Program: https://partner.microsoft.com/.


  1. Log in to your Bread & Butter dashboard.
  2. Go to Settings in the left menu, then navigate to your Global Conversion Methods tab.
  3. Locate your Microsoft connection and edit the settings to switch from Sandbox to Production Mode.
  4. Enter a custom name and description for your reference.
  5. Paste the Client ID and Client Secret you generated in Azure.
  6. Click Save, and ensure the checkbox next to your new Microsoft provider is enabled.

Final Polish: Complete Your White-Label Setup

You have successfully added your brand name to the Google consent screen! However, visitors may still see breadbutter.io     listed in the URL routing during the connection process.

To completely remove our branding and keep visitors fully within your own domain ecosystem, navigate to the Custom Auth Domain tab in your Bread & Butter settings to set up your Custom Auth Domain.

Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.