diff --git a/client/login_microsoft.php b/client/login_microsoft.php
index f3ff3042..bb5c59f1 100644
--- a/client/login_microsoft.php
+++ b/client/login_microsoft.php
@@ -125,6 +125,7 @@ if (isset($_POST['code']) && $_POST['state'] == session_id()) {
                 $_SESSION['user_id'] = $user_id;
                 $_SESSION['user_type'] = 2;
                 $_SESSION['contact_id'] = $contact_id;
+                $_SESSION['csrf_token'] = randomString(32);
                 $_SESSION['login_method'] = "azure";
 
                 // Logging