This guide details how to integrate and map Microsoft tenants to Syncro, sync Entra ID users, attach curated security baselines for posture management, and configure universal billing for Microsoft licenses.

Read on, or watch this short video to learn more:

Prerequisites

Microsoft 365 Management features require that you're on Syncro's Team Plan.

If you're new to Syncro and just setting up your account, be sure to create your Organizations before setting up the Microsoft integration. See Define Your Client Universe: Organizations & End Users and/or Work with Organizations for more information.

Step 1: Integrate with Microsoft

First, you'll connect Syncro to your Microsoft Tenant(s) to establish a communication link. You can integrate with a Single Tenant or a CSP. 

IMPORTANT: 

• If you created multiple Organizations in Syncro and want to do a Single Tenant integration, it's a good idea to Move Multiple Organizations to a Single Syncro Tenant now. (If you work in an IT Department, you're more likely to encounter this situation.)
• If you're integrating with a CSP, be sure to review this important Information for CSP Microsoft integrations.

As an example, here's how you'd integrate with a Single Tenant:

1. Navigate to Admin > RMM Settings - Microsoft Tenant Integrations. 
2. Click the Integrate button, then select “Single Tenant.”
3. Log into your Microsoft account (if necessary), then click Accept for the required permissions.  

See more detailed steps in Integrate with Microsoft.

Step 2: Map Your Microsoft & Syncro Tenants

The next step is to connect, or map, your Microsoft Tenants from Step 1 to their appropriate Syncro Tenants. 

Follow these steps:

1. Navigate to Admin > RMM Settings - Microsoft Tenant Integrations. 
2. Click the vertical ellipsis ()  in the appropriate row, then select “Map Syncro Tenant.” 
3. Select an existing Organization from the Syncro Tenant dropdown menu.
4. Click Start Tenant Mapping. 

See more detailed steps in Map Syncro Tenants.

Step 3: Sync Your Users

When you set up Microsoft Entra ID User Sync for each of your Organizations, Syncro can pull your existing users from Microsoft into Syncro as End Users, and keep them synchronized. The User Sync also allows you to take Microsoft-specific user actions—such as resetting a user's MFA or password—directly from Syncro.

Follow the steps described in Set Up Microsoft Entra ID User Sync. Be sure you've met the Entra ID prerequisites described there before you begin the syncing process.

Step 4: Attach a Baseline to Your Tenants

Finally, you’ll attach the Security Essential baseline to your Syncro Tenant. The Security Essential Baseline is a Syncro-curated Baseline that enables continuous, daily auditing of your Microsoft environment against industry-aligned security controls.

Watch this short video to learn more:

Follow the steps described in Attach or Detach Baselines. Be sure to set up Notifications to alert members of your security team to any rule violations (Bonus: Learn more About Security Posture Management & Baselines or Create & Download an Assessment to share with others.)

Step 5: Bill Your Customers for Microsoft Licenses

Note: If you're an MSP and using Syncro's Billing and Invoicing features, Universal Billing for Microsoft is automatically enabled as soon as a Syncro Tenant is mapped to a Microsoft Tenant. 

You can easily charge your customers for Microsoft licenses directly from Syncro after a quick configuration:

1. Navigate to the Invoices tab, then from the Invoices Module menu, select Recurring Invoices.
2. Edit the scheduled invoice for your customer to add a Vendor Usage Counter for Microsoft Products:
   

That's it! You've fully automated billing the Customer Organization for the Microsoft products they use.