diff --git a/.env.deploy.example b/.env.deploy.example
index 69e7c9c..4bcad55 100644
--- a/.env.deploy.example
+++ b/.env.deploy.example
@@ -35,3 +35,9 @@ VITE_BACKEND_URL=https://your-domain.com
 # CORS origins (should match your frontend domain)
 # Multiple origins can be comma-separated
 CORS_ORIGINS=https://your-domain.com
+
+# Azure AD MSAL Configuration (for Microsoft SSO)
+# Get these from your Azure AD app registration
+VITE_AZURE_CLIENT_ID=your_azure_client_id
+VITE_AZURE_TENANT_ID=your_azure_tenant_id
+VITE_AZURE_REDIRECT_URI=https://your-domain.com
diff --git a/deploy.sh b/deploy.sh
index 6022646..624fab1 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -102,10 +102,16 @@ cd frontend
 # Install dependencies (npm install is idempotent)
 npm install
 
-# Create/update .env.local with production URLs
+# Create/update .env.local with production URLs and Azure AD config
 cat > .env.local << EOF
+# Backend URLs
 VITE_BACKEND_WS_URL=${VITE_BACKEND_WS_URL:-ws://localhost:8000/ws/analyze}
 VITE_BACKEND_URL=${VITE_BACKEND_URL:-http://localhost:8000}
+
+# Azure AD MSAL Configuration
+VITE_AZURE_CLIENT_ID=${VITE_AZURE_CLIENT_ID:-}
+VITE_AZURE_TENANT_ID=${VITE_AZURE_TENANT_ID:-}
+VITE_AZURE_REDIRECT_URI=${VITE_AZURE_REDIRECT_URI:-}
 EOF
 echo "  Frontend environment configured"