Connect to Microsoft Entra ID

Connect and integrate your Microsoft Entra ID user store with your AdminX tenant so you can manage all your Entra ID users from AdminX.

---

Prerequisites for Azure

AdminX and 1Kosmos integrate with Microsoft Entra ID natively using Microsoft Graph. To set up this integration, you need to create a few things in Azure.

Ensure that your Azure environment has permission to perform the following steps.

Registering an application

1. Go to https://portal.azure.com/ and log in with your Azure credentials. Once logged in, scroll down to Azure services.

2. Click Microsoft Entra ID.

3. From the application Overview page, under the Manage drop-down menu, click App registrations.

4. On the App registrations page, click New registration.

5. On the Register an application page, enter a user-facing display name for your application. (This example uses the name Test Demo Wiki.)

6. Under Supported account types, select Accounts in this organizational directory only (application name only - Single-tenant).

7. Leave the Redirect URI (optional) section blank.

8. Review your selections, then click Register.

9. Once the app is registered, you're redirected to a page listing various details. Make a note of (or copy) the Application (client) ID — you'll need it to configure AdminX for Entra ID.

Creating the application secret

1. From the same application overview page, click Certificates & secrets in the left-hand menu, under Manage.

2. Click New client secret. Enter a name in the Description box and select how soon the secret should expire.

3. Click Add.

4. Your secret now appears under Client secrets. Make a note of (or copy) the Value parameter — you'll need this secret to configure AdminX for Entra ID.

Creating the application permissions

To use Microsoft Entra ID with AdminX:

1. Under the Manage drop-down menu of the application's overview page, click Authentication.

2. Scroll down to Advanced settings and toggle Allow public client flows to Yes.

3. Click Save.

Set Allow public client flows to Yes to use Microsoft Entra ID in AdminX.

1. Under the Manage drop-down menu, click API permissions.

2. On the API permissions page, click Add a permission. In the Request API permissions window that opens, select Microsoft Graph (the largest of the available icons).

3. Click Application permissions.

4. Under Select permissions, use the search box to find each permission — enter the first word (such as Directory), then expand the result to see the full list of permissions.

   To enable reading and writing to the user directory (adding or deleting users), enable the following permissions:

   • Directory.Read.all

   • Directory.ReadWrite.all

   • User.Read

   • User.ReadWrite.all

   To only read from the user directory (without being able to add new users), enable the following permissions instead:

   • Directory.Read.all

   • User.Read

   • User.Read.all

5. After selecting all the required permissions, click Add permissions.

6. An administrator must approve the permissions before they can be used. To grant consent, click Grant admin consent for [your application].

7. After consent is approved, the status changes to Granted.

Configuring Microsoft Entra ID in AdminX

The following items are needed to configure Microsoft Entra ID in AdminX:

• Application (client) ID — found on the App registrations page: Azure Home -> Microsoft Entra ID -> App registrations

• Tenant ID — found on the Microsoft Entra ID Overview page: Azure Home -> Microsoft Entra ID The Tenant ID can also be found on your application's Overview page: Azure Home -> Microsoft Entra ID -> App registrations -> [your application name]

• (Tenant) Name — your Azure tenant Name, found on the Microsoft Entra ID Overview page: Azure Home -> Microsoft Entra ID

• Client Secret — the secret for your app registration, located on the application's Certificates & secrets page: Azure Home -> Microsoft Entra ID -> App registrations -> [your application name] -> Certificates and secrets You can view the secret only when you create it. If you lose your secret, create a new one by clicking New client secret.

• Login URL — defaults to https://login.microsoftonline.com

• Graph API URL — defaults to https://graph.microsoft.com

• Graph Query Filter - Enter your OData filter. To scope by group membership:

  memberOf/any(g:g/id eq '<group-id>') When configured, the platform retrieves only the users matching that filter instead of all users in the tenant. If you leave the field empty, it syncs all users (default behavior).

Scenario	Result
No filter configured	All users are synced (default)
Valid group ID in filter	Only that group's members are synced
Invalid group ID	Test Connection fails with "Group not found"
Search within a filtered group	Matches any field (first name, last name, email, or username)

Required App Registration permissions (Microsoft Entra)

The Entra ID App Registration must have the following Application permissions (not Delegated), with admin consent granted:

• User.Read.All

• Group.Read.All

• GroupMember.Read.All

Setting up Microsoft Entra ID in AdminX

After configuring all the necessary prerequisites, you can connect to Microsoft Entra ID from AdminX.

1. Log in to your tenant as a community administrator.

2. From the left pane, go to the Directory menu.

3. On the Directory Integrations page, click Add new directory.

4. Select Entra ID.

5. Review the information displayed, then click Setup Entra ID.

6. Enter all the information you copied from Azure.

7. Configure attribute mapping for the 1Kosmos data store AdminX uses internally. This mapping links Azure directory attributes (such as name, number, and so on) to the attributes 1Kosmos uses.

   The following attributes need to be mapped:

   Azure Directory Attribute	1Kosmos Attribute Name
   givenName	firstname
   surname	lastname
   userPrincipalName	email
   mobilePhone	phone
   userPrincipalName	username
   userPrincipalName	uid

8. Click Add new mapping.

9. Enter the Azure attribute in the top box labeled Directory attribute. Use the drop-down menu to select the corresponding 1Kosmos attribute from the table above, then click Create.

10. Repeat this process until you map all attributes from the table above, then click Next.

    Once you've mapped the attributes, you're done. You can click View Users to preview your Entra ID users.

11. Click Complete to finish adding your Entra ID directory to AdminX.

The added Entra ID directory now appears on the Directory Integrations page in AdminX.

AdminX uses the configured mappings when it imports Entra ID users. Review the mappings before adding the directory, because they control how user data appears in AdminX.