diff --git a/install/featurebase.conf b/install/featurebase.conf
index df52ec2d7..62671e018 100644
--- a/install/featurebase.conf
+++ b/install/featurebase.conf
@@ -372,14 +372,15 @@ log-path = "/var/log/molecula/featurebase.log"
   
 # ==============================================================================
 # Enable/Disable AuthN/AuthZ for featurebase 
-# Can choose identity provider, pass authorize and user-info endpoints, and client id
+# Can choose identity provider, defaults for Azure Active Directory
+# Use provided keygen binary to generate hash and block keys with sufficient length and entropy
 # [auth]
 #  enable = false
 #  client-id = ""
 #  client-secret = ""
-#  authorize-url = ""
-#  token-url = ""
-#  group-endpoint-url = ""
-#  scope-url = ""
+#  authorize-url = "https://login.microsoftonline.com/4a137d66-d161-4ae4-b1e6-07e9920874b8/oauth2/v2.0/authorize"
+#  token-url = "https://login.microsoftonline.com/4a137d66-d161-4ae4-b1e6-07e9920874b8/oauth2/v2.0/token"
+#  group-endpoint-url = "https://graph.microsoft.com/v1.0/me/transitiveMemberOf/microsoft.graph.group?$count=true"
+#  scope-url = ["https://graph.microsoft.com/.default", "offline_access"]
 #  hash-key = ""
 #  block-key = ""
\ No newline at end of file