Sync Clients From Your Microsoft Azure Portal Last updated: Aug 23, 2021
1. Navigate to Microsoft Entra Admin Center (https://entra.microsoft.com)
2. Expand Applications and select App registration
3. Give the application a name (ie., Vertask)
4. Select whether your org is Single Tenant of Multi Tenant then hit Register
- If you are a global admin in 365 and are unsure of this, it is most likely single tenant
5. You are now on the' Overview' page as you now have the app registration created. Copy your Application (client) ID and Directory (tenant) ID; You will need them later.
6. You will need to create the 'Client secret' for your registered app.
- Click 'Certificates & secrets' from the left menu
- Click the '+New client secret' button.
- Select how long your secret is valid. (Vertask will be unable to sync after this and a new secret will need to be generated to resume syncing.)
- Click the 'Add' button.
- Copy the Secret value, you will need it later. If you do not copy the secret now, you will have to do step 6 again as you will not be able to see it again.
7. We now have to make sure we have the appropriate permissions to sync users. Click API permissions on the left navigation.
If you want to sync users:
- Click +Add a permission
- Select Microsoft Graph
- Select Application Permission
- Now, scroll down to User and check the box next to the permission User.Read.All
- Select the blue Add permission button at the bottom of the window to save the selection
If you want to sync users:
- Click +Add a permission
- Select Microsoft Graph
- Select Application Permission
- Now, scroll down to Device and check the box next to the permission Device.Read.All
- Select the blue Add permission button at the bottom of the window to save the selection
8. Next, click the 'Grant admin consent for Organization' button, and select the blue Yes button to save changes.
9. Head over to Vertask Azure User Sync. (You must be a superuser in Vertask to do this.)
10. Set the status to enabled and specify and sync frequency.
11. Enter the Application (client) ID, Tenant ID, and Client secret you previously created.
12. Select if you want to sync external users from your Azure environment and whether you want to invite users to the client portal when they are synced.
13. Once all settings are correct, click the Save Changes button
14. At the top of the page, click Microsoft Azure
15. You can choose to sync users or devices immediately, do manual sync only, or scheduled automatic sync frequency.