diff --git a/infrastructure/application/Pulumi.production.yaml b/infrastructure/application/Pulumi.production.yaml
index f86e61472c..c61c89245f 100644
--- a/infrastructure/application/Pulumi.production.yaml
+++ b/infrastructure/application/Pulumi.production.yaml
@@ -37,6 +37,10 @@ config:
     secure: AAABAKQ6L5aOwZWpj9YOsaW8bOOukjt1mZuTgdKjM/3nSmF/0nM/f9c9W9DXygUFj2wtq5/iugo1UTS0+bhEn8Dr9k1Qzr2EmuGpQw==
   application:metabasePgPassword:
     secure: AAABACVXNwP6Fo0v2/PoiWklNGRECTSYLRX/Ypk6APtvt9e4iOdqPVt5+tZULOxwqnfO+1bL4B6AAJxjt8gAbQ==
+  application:microsoft-client-id:
+    secure: AAABAMnDXxOB4BNSG0Sn7gZ34DiliUfgCwQ5qYzrm7QOu+mNEkXafFu6RBvaoMIeTBF3Pb0/mPJ8MM/rN4ILgX3B1PM=
+  application:microsoft-client-secret:
+    secure: AAABALqkvTVysZDJq8P01oKWVQ+aFv5oEgE2CNr81Y5WvOhyYAp5cPo4zZr/sH89EiZGfeVUzxzgRnncOefAmh+nzz2bF107
   application:ordnance-survey-api-key:
     secure: AAABAE+wD6ahxO45tq/JWp6odrHX9jOhdjlMsCqS6kFqBgJ+3T56fOSgpZ26nEftv9IwWZQh/v93tRtTDEb+uw==
   application:session-secret:
diff --git a/infrastructure/application/Pulumi.staging.yaml b/infrastructure/application/Pulumi.staging.yaml
index c229c31e56..24baa99d08 100644
--- a/infrastructure/application/Pulumi.staging.yaml
+++ b/infrastructure/application/Pulumi.staging.yaml
@@ -38,6 +38,10 @@ config:
     secure: AAABAGmfVICD8sR+IE6mHC8BNUY1WQXGCbv5F3C1fSgA+1ADiRem3GNrwY0YRZociRYuPIo3MIRS0aIg44jt10SBCE0ik58wHamcKA==
   application:metabasePgPassword:
     secure: AAABADfCkSRtVTdU8wi1F+nwuHl8OeI3bm9ZzaNkIY4yOGB9dsOqS30tkD8W7GZlNoWDZT2ojoP3zOFPuTLWbQ==
+  application:microsoft-client-id:
+    secure: AAABAJhb8E/x+8SGVr036wQhlEpzGpVblSupb75+A8TNXIgSkEDx9zOu7M5Mdb1STnmlvqiw399y3SkBPfLr1x+B/Ts=
+  application:microsoft-client-secret:
+    secure: AAABANwyhzCHo1lqq/SYdaTPrBH0UiJvfkB1gYLo/x61s+zcXgn2IzqPvKnvkQayPAU67FJqu60jKGAFZFy7TPp5RHqigulC
   application:ordnance-survey-api-key:
     secure: AAABAKhzYRhAmGmoBY1fPF75JWSWMOTORRCUAPKqvFUJMA60U5IFDUvPZ1Y+FuLtQ6Y1sQ8Q3laXGbp0f9j3Lw==
   application:session-secret:
diff --git a/infrastructure/application/index.ts b/infrastructure/application/index.ts
index 72b80554eb..77d2fca188 100644
--- a/infrastructure/application/index.ts
+++ b/infrastructure/application/index.ts
@@ -352,9 +352,23 @@ export = async () => {
             name: "GOOGLE_CLIENT_SECRET",
             value: config.requireSecret("google-client-secret"),
           },
-          { name: "SESSION_SECRET", value: config.requireSecret("session-secret") },
+          {
+            name: "MICROSOFT_CLIENT_ID",
+            value: config.require("microsoft-client-id"),
+          },
+          {
+            name: "MICROSOFT_CLIENT_SECRET",
+            value: config.requireSecret("microsoft-client-secret"),
+          },
+          {
+            name: "SESSION_SECRET",
+            value: config.requireSecret("session-secret"),
+          },
           { name: "API_URL_EXT", value: `https://api.${DOMAIN}` },
-          { name: "BOPS_API_TOKEN", value: config.requireSecret("bops-api-token") },
+          {
+            name: "BOPS_API_TOKEN",
+            value: config.requireSecret("bops-api-token"),
+          },
           { name: "JWT_SECRET", value: config.requireSecret("jwt-secret") },
           { name: "PORT", value: String(API_PORT) },
           {