{"id":24089,"date":"2024-11-15T14:54:24","date_gmt":"2024-11-15T13:54:24","guid":{"rendered":"https:\/\/help.openbee.com\/open-bee-portal\/administrators-guide\/importing-and-syncing-azure-ad-directory-users\/"},"modified":"2026-05-13T09:39:41","modified_gmt":"2026-05-13T07:39:41","slug":"importing-and-syncing-azure-ad-directory-users","status":"publish","type":"page","link":"https:\/\/help.openbee.com\/en\/open-bee-portal\/administrators-guide\/importing-and-syncing-azure-ad-directory-users\/","title":{"rendered":"Importing and syncing Azure Ad directory users"},"content":{"rendered":"\n

1. Create an enterprise app in Azure Ad<\/h3>\n\n

Sign in to Microsoft<\/a><\/p>\n\n

– Step 1: Create an enterprise application<\/h4>\n\n

Go to the interface for adding a new app<\/p>\n\n

\"\"<\/figure>\n\n

Choose the “Non-gallery application” type and enter the name of the application<\/p>\n\n

\"\"<\/figure>\n\n

Now the app is added.<\/p>\n\n

\"\"<\/figure>\n\n

– Step 2: Generation of the Secret Client<\/h4>\n\n

A secret customer ID must be generated, if it does not already exist.Go to the application registration interface and click on the application you just created “OpenBee Portal” <\/a><\/p>\n\n

\"\"<\/figure>\n\n

Click on Certificates & Secrets <\/a><\/p>\n\n

\"\"<\/figure>\n\n

Click the Add New Customer Secret button <\/a><\/p>\n\n

\"\"<\/figure>\n\n

A new secret identifier has been generated. <\/a><\/p>\n\n

\"\"<\/figure>\n\n

<\/p>\n\n

The PIN must be recorded in a secure location so that it can be used in a next step. This passcode will no longer be readable after the page loads. <\/p>\n\n

2. Adding Graph API permissions<\/h3>\n\n

Navigate to the API permissions management interface and click on the add permissions button<\/p>\n\n

\"\"<\/figure>\n\n

Choose the Microsft Graph API<\/p>\n\n

\"\"<\/figure>\n\n

Choose app permissions<\/p>\n\n

\"\"<\/figure>\n\n

Check the “User.Read.All” permission:<\/p>\n\n

\"\"<\/figure>\n\n

Check the Groupmember.Read.All permission:<\/p>\n\n

\"\"<\/figure>\n\n

Permissions need to be validated by an administrator. Click on the Grant admin consent button, to approve the permissions <\/p>\n\n

\"\"<\/figure>\n\n

Permissions are added and approved.<\/p>\n\n

\"\"<\/figure>\n\n

Allow users who are authorized to use the app from app registration<\/p>\n\n

\"\"<\/figure>\n\n

Add permissions to the groups or users who are allowed to log in to the portal.<\/p>\n\n

\"\"<\/figure>\n\n
\"\"<\/figure>\n\n

3. Adding an Azure AD directory<\/h3>\n\n

To add an Azure Ad directory you need to have the admin_ldap role (same as for LDAP)<\/p>\n\n