EntraID host synchronization integration

You can integrate Entra ID with your Systam Visit installation to automatically sync users from a selected group into the system, so the host list stays up to date daily. You can also set up an optional admin group that gives certain users elevated access. This integration may bring some additional costs.

Requirements

To set up the integration, you need:

• Your Entra ID tenant ID
• The group ID of the user group, and the group ID of the admin group if you want to import admins from a separate group. (You can also set user levels manually in RespaManager.)

Setup process

Make sure your Entra ID environment includes:

• A user group containing all required people.
• An optional admin group with elevated access. Admins must also be members of the user group that contains all hosts.

What the group must look like

The same requirements apply to both the user group and the admin group:

• Add people directly to the group. The integration reads only the direct members of the group. If you add another group inside it (for example, department groups under one shared group), users in those nested groups are not synced to Systam Visit.
• The group type can be Security or Microsoft 365. The membership type can be Assigned or Dynamic User. A Dynamic Device group does not work, because it contains devices instead of users.
• Every user must have a first name and a last name (First name and Last name). Users missing either one are left out of the sync. This often applies to service accounts and guest users.

Send us the required information

Send the following details to our support team (support@systam.fi):

• Entra ID tenant ID
• Group IDs for the user and admin groups

The group ID is the group's Object ID, a long identifier in the format xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx. You can find it in the Entra admin center under Groups → All groups → [group] → Overview. The group name or email address does not work as the ID.

Access consent link

Once we receive the details, we will send you a link where you can grant permissions to our Azure Enterprise Application.

Application details

Our application, Systam AD Sync, requires the following permissions:

• User.Read.All
  • Enables the application to read the full profile of all users in the organization.
• GroupMember.Read.All
  • Allows the application to restrict queries to a specific group.

These permissions work with an app-only access model, which simplifies the process for the end user. An administrator can approve the permissions on the Microsoft identity platform admin consent page through the link we provide.

Ongoing monitoring

Once the Entra ID integration is active, it is covered by our automated monitoring. Significant changes or failed updates are detected automatically and reported to our support team for prompt resolution.

If you need more help, contact our support team at support@systam.fi.