diff --git a/plugin/azure_active_directory/src/callback.php b/plugin/azure_active_directory/src/callback.php
index 1f5e6ed61a..8d450d80f1 100644
--- a/plugin/azure_active_directory/src/callback.php
+++ b/plugin/azure_active_directory/src/callback.php
@@ -23,6 +23,10 @@ if (!empty($_GET['error']) && !empty($_GET['state'])) {
 
 $plugin = AzureActiveDirectory::create();
 
+if ('true' !== $plugin->get(AzureActiveDirectory::SETTING_ENABLE)) {
+    api_not_allowed(true);
+}
+
 $provider = $plugin->getProvider();
 
 if (!isset($_GET['code'])) {