The Microsoft Entra ID User Sync is a direct integration between Syncro and Microsoft Entra ID, and is for any MSP or internal IT organization whose End Users are on the Microsoft platform. 

Once you've integrated Microsoft and mapped your Syncro Tenants, you can set up Entra ID User Sync to add and update End Users in Syncro based on the User Type, Department, Office Location, Domain, and/or Group assigned to those users within the Microsoft Tenant.

The Microsoft Entra ID User Sync provides:

• The pre-population of End Users in Syncro, based on those you've already set up in Microsoft Entra ID.
• Ongoing consistency between Syncro and Microsoft Entra ID as users are added, removed, or changed.

Notes: 

• The Microsoft Entra ID User Sync replaces the former Syncro-Entra ID Sync integration, but you can continue using the legacy sync. If desired, you can run both in parallel to facilitate a smooth transition. 
• Customers are in the process of being renamed to Organizations, and Contacts to End Users. You may see both in Syncro for the time being.

Enable the Sync

You must enable Microsoft Entra ID User Sync for each Organization. 

1. First, navigate to the Syncro Tenant's Details Page. There are five ways you can do this:
   1. From the Microsoft Tenant Management page/table, click the hyperlinked name of a Syncro Tenant:
      
   2. From the Organizations page/table, click the hyperlinked name of a Syncro Tenant:
      
   3. From an Organization's Details Page in the INFORMATION section, click the hyperlinked name of the Syncro Tenant:
      
   4. From an Organization's End Users subtab, click Set Up Microsoft User Sync:
      
      Tip: After you've enabled the sync for the first time, you can also use the “Manage” link next to the quick search:
      

The Syncro Tenant Details Page displays:

2. In the Customer Organization's Microsoft User Sync column, click Set Up. Syncro displays the Set Up Microsoft Entra ID User Sync pop-up window.
3. Click the down-facing caret to open and check the desired boxes for the User Type, Domain, Office Location, Department, and Group sections:
   
   Note: Users who meet all of the selected criteria will be synced. Microsoft users who match these criteria will also be added to the Organization's End Users Subtab. Checking the “All” box in any section will automatically include future users (e.g., if a new Office Location" is added, users from that location will be included in the sync). Your settings here may impact the initial sync. See What Gets Synced & When for more information.
4. Click Enable Sync. Syncro closes the pop-up window and informs you that the sync is in progress.
5. Click Close. Once the sync is set up, the Microsoft Entra ID User Sync column displays an “Enabled” status, and a vertical ellipsis () icon appears at the end.

Note: The options available after the User Sync shows an “Enabled” status include Edit User Sync Filters and Disable User Sync.

What Gets Synced & When

Once you've set up the Microsoft Entra ID User Sync, Syncro pulls the following Microsoft user data from Entra ID to populate your End Users:

• User Details: Name, Email, Phone, Mobile Phone, Street Address, City, State/Province, Zip/Postal Code, and Job Title.
• Associated Devices: If the Microsoft user has a device in Entra ID with the same MAC address as an Asset in Syncro, the sync will link the End User to their associated Assets.
• Microsoft Data: Assigned Microsoft licensees, Last Sign In Date/Time, MFA Status and Method, User Principal Name, and Object ID.

Following any initial sync time, End Users are synced from Microsoft HOURLY, and End User's Details page displays their Microsoft User Details, which includes information about licenses and MFA.

Tip: Use the Microsoft License and Last Microsoft Activity columns in the End Users subtab/table to easily see which End Users are being synced with Entra ID.

About the Initial Sync

If you've filtered your user sync by Group, Syncro won't display any End Users for your Organizations until all of them have been processed. This first-time process may take up to 12 hours. Any users added after the initial sync might also not show up in Syncro for up to 12 hours. (This delay does not apply to syncs not using the Group filter.)

If End Users already exist for an Organization in Syncro but you want to sync with Entra ID, know that Syncro matches based on email address. So if there's an existing End User in Syncro with the same email address as the Microsoft user, Syncro won't create a duplicate. Instead, it will map the existing End User to the Microsoft user for future syncing. Additionally, Syncro only looks for matches within the Organization, so if you have a person who's an End User for multiple Organizations, the sync will only map the Microsoft user to the Organization for which it it syncing. 

About Deleted or Disabled Users

Deleting or disabling a user in Microsoft will NOT delete the End User. Rather, it will mark them as “Disabled in Microsoft.” You can filter the End User table to excludes these:

Similarly, deleting an End User who is mapped to an Entra ID user will NOT delete that user in Microsoft. If that user still exists in Entra ID and still meets the filter criteria for the Organization, Syncro will create a new End User in the next sync.

Edit User Sync Filters or Disable User Sync

If you've added a new group of users on a Microsoft Tenant that don't belong to the same Organization, you may want to edit your user sync filters. To do this, follow these steps:

1. Navigate to a Syncro Tenant's Details Page.
2. In the Organization's Microsoft User Sync column, click the vertical ellipsis ().
3. If you want to adjust the sync filters, select the “Edit User Sync Filters” option. Make your changes in the pop-up window, then click Save.
   Note: Editing sync filters applies to future/ongoing syncs. Any Syncro End Users mapped to Entra ID users who no longer meet your criteria will not be deleted from Syncro; they will no longer be updated. Moving forward, new Syncro End Users will be created only if they meet the new criteria.
4. If you want to disable the sync altogether, select the “Disable User Sync” option. See also About Deleted or Disabled Users.
   Note: Disabling user sync will stop automatic updates from Microsoft Entra ID. Existing users will remain in Syncro, but new users and changes from Entra ID will no longer be synced.
   If you're certain you want to do this, click Disable User Sync in the confirmation pop-up window. Syncro redisplays the Set Up button in the Microsoft User Sync column so you can re-create the sync at any time.

Troubleshooting

If you accidentally sync Entra ID users from the wrong Microsoft Tenant, follow these steps: 

1. From the Syncro Tenant Details page, disable the Entra ID User Sync.
2. Individually delete any Syncro End Users that should not have been created for the Organization. See also: Delete an End User.
3. On the Microsoft Tenant Management page, ensure the correct mapping exists between the Microsoft and Syncro Tenants. Depending on what's incorrect, you'll need to take one of the following actions:
   1. Unmap the Syncro Tenant from the incorrect Microsoft Tenant and then remap the correct one.
   2. Re-assign the Organization to the Syncro Tenant that is mapped to the correct Microsoft Tenant.
4. Set up a new Entra ID User Sync from the Syncro Tenant Details page.