URGENT — Azure Free Trial deletion on November 17, 2026: Will Microsoft Entra App Registration and consumer OneDrive OAuth survive?

Deleting only the expired Azure Free Trial subscription does not delete the tenant-level Microsoft Entra app registration, but if the notice also schedules the billing account or Entra tenant for deletion, upgrade or obtain Microsoft support confirmation before November 17, 2026.

What survives if only the Azure subscription is deleted

An app registration is a directory object in its Microsoft Entra tenant, not an Azure subscription resource. The application object contains its client ID, credentials, redirect URIs, and permission configuration; the corresponding service principal represents it in a tenant. ^1^

A directly matching accepted Microsoft Q&A answer confirms that canceling an Azure subscription does not affect Entra app registrations unless the application depends on Azure resources belonging to that subscription. ^2^

For the architecture described—application hosted on Cloudflare, delegated Microsoft Graph access, and personal OneDrive accounts—the expected result after subscription-only deletion is:

• The application/client ID remains.
• Existing client secrets remain until their configured expiration.
• An authorized Entra administrator can manage the registration and create replacement secrets.
• The consumers authorization and token endpoints remain applicable to personal Microsoft accounts.
• Users can reauthorize the application.
• Refresh-token requests continue to use the client ID, refresh token, and, for a confidential web application, the client secret. ^3^

No Pay-as-you-go Azure subscription is required merely to run this OAuth integration, provided the Entra tenant and app registration remain active and there are no subscription-hosted dependencies.

The critical check: subscription deletion versus tenant deletion

Do not rely only on wording such as “account” or “associated data.” Check the notice and both admin portals for the named object:

1. In Azure portal → Subscriptions, record the subscription ID and status.
2. In Azure portal → Cost Management + Billing → Products + services → All billing subscriptions, look for Microsoft Entra ID Free.
3. In Microsoft Entra admin center → Identity → Overview, record the tenant ID.
4. In Identity → Applications → App registrations → All applications, verify that the production registration is in that tenant.
5. Check whether the notification specifically says any of the following:
   • only the Azure subscription will be deleted;
   • the billing account will be terminated;
   • the associated Microsoft Entra tenant will be deauthorized or deleted.

Microsoft documents the Entra tenant and its Microsoft Entra ID Free billing record as separate from an Azure subscription. That free billing record has no product charge and represents ownership of the tenant containing applications and settings. ^4^

If the notice concerns billing-account termination, the risk is materially different: Microsoft states that subscription suspension, tenant deauthorization, account termination, and permanent deletion can occur if no action is taken within the notification period. Account termination is not reversible. ^5^

Deleting the Entra tenant would delete its resources, including the app registration. ^6^ That would invalidate the existing client identity; recreating an app elsewhere would produce a different client ID and require user reauthorization.

Token continuity is not an absolute guarantee

Subscription survival does not guarantee that each refresh token remains valid indefinitely. Refresh tokens can expire or be revoked because of user, administrator, credential, or sign-in-service actions. Applications must handle refresh failure by sending the user through interactive authorization again. Refresh tokens should also be replaced in storage when Microsoft returns a new one. ^7^

Therefore, before the deadline:

• Create and deploy a replacement client secret before the current one expires.
• Test interactive reauthorization for both personal accounts.
• Ensure the authorization request includes offline_access.
• Persist the newest refresh token returned by each successful refresh.
• Securely export the app manifest and document redirect URIs, permissions, tenant ID, client ID, secret expiry, and account owners. This is recovery documentation, not a way to preserve the same client ID in another tenant.

Whether to upgrade to Pay-as-you-go

If the notice clearly applies only to the Azure subscription, upgrading is not necessary for the app registration itself.

If it mentions billing-account termination, tenant deauthorization, or tenant deletion—or its scope remains unclear—upgrade the existing Free Trial before the deadline as the lowest-risk continuity action:

1. Azure portal → Subscriptions.
2. Select the expired Free Trial.
3. Select Upgrade subscription or the upgrade banner.
4. Add a payment method, choose the subscription name and support plan, and select Upgrade. ^8^

Pay-as-you-go charges are based on Azure service usage. If the subscription contains no billable Azure resources, there should be no Azure resource-consumption charge; separately purchased products or a paid support plan can still generate charges. Check Subscription → Resources, including hidden resources, and select a non-paid support option if offered. Microsoft states that upgraded accounts are charged for non-free services they use. ^9^

Escalation when the portal cannot select a service

Because the existing portal flow was blocked, use the Azure Billing Support request linked from the disabled-subscription guidance; billing assistance is the appropriate route to determine whether the dated notice applies to the subscription, billing account, or tenant. ^10^

Include:

• The exact notification text and screenshot.
• Deadline: November 17, 2026.
• Billing-account type and status.
• Subscription ID and status.
• Tenant ID.
• Statement that the tenant contains a production, consumer-facing app registration.
• Request for written confirmation that the tenant and Microsoft Entra ID Free billing record will remain active, not merely that the Azure subscription can expire.
• Request routing to Azure Subscription Billing and Microsoft Entra Identity if tenant deauthorization is involved.

Do not post those identifiers publicly in Microsoft Q&A.

References

1. Application and service principal objects in Microsoft Entra ID
2. Entra ID app registration access concern - Microsoft Q&A
3. Get access on behalf of a user
4. Microsoft Entra ID Free
5. Keep your Microsoft business billing account active
6. Protect tenants and subscriptions from abuse and fraud attacks
7. Refresh tokens in the Microsoft identity platform
8. Upgrade your Azure free account or Azure for Students Starter account
9. Avoid charges with your Azure free account
10. Reactivate a disabled Azure subscription