EntraID host synchronization integration

You can integrate Entra ID with your Systam installation to automatically sync users from a specified group into the system, ensuring that the recipient list remains up to date daily. Additionally, an optional admin group can be configured to provide elevated access to certain users. This integration may bring you some additional costs.

Requirements

To set up the integration, you will need:

• An Entra ID tenant ID

• The group IDs of the user and admin groups (if applicable), if you want to set-up admin rights with different group, the person has to be found from both groups. (Admin rights can be set-up as well manually at RespaManager)

Setup Process

1. Prepare the Entra ID Groups
   Ensure that your Entra ID environment includes:

   • A user group containing all required personnel.

   • An optional admin group with elevated privileges.

2. Provide Required Information
   Send the following details to our support team ([email protected]):

   • Entra ID tenant ID

   • Group ID(s) for users and admins (if applicable)

3. Access Consent URL
   Once we receive the necessary details, we will provide you with a link to grant permissions to our Azure Enterprise Application.
   
   

Application Details

Our application, Systam AD Sync, requires the following permissions:

• User.Read.All
  Enables the application to read the full profile of all users in the organization.

• GroupMember.Read.All
  Allows the application to restrict queries to a specific group.

These permissions operate on an app-only access model, which simplifies the process for the end user. By following the provided link, an administrator can approve the necessary permissions in the Microsoft identity platform admin consent page.

Ongoing Monitoring

Once the Entra ID integration is active, it falls under our automated monitoring system. Any significant changes or failed updates will be automatically detected and reported to our support team for prompt resolution.

For further assistance, please contact our support team at [email protected].