The Microsoft Entra ID User Sync is a direct integration between Syncro and Microsoft Entra ID, and is for any MSP or internal IT organization whose End Users are on the Microsoft platform. 

Once you've integrated Microsoft and mapped your Syncro Tenants, you can set up Entra ID User Sync to add and update End Users in Syncro based on the User Type, Department, Office Location, Domain, and/or Group assigned to those users within the Microsoft Tenant.

The Microsoft Entra ID User Sync provides:

• The pre-population of End Users in Syncro, based on those you've already set up in Microsoft Entra ID.
• Ongoing consistency between Syncro and Microsoft Entra ID as users are added, removed, or changed.

Note: The Microsoft Entra ID User Sync replaces the former Syncro-Entra ID Sync integration, but you can continue using the legacy sync. If desired, you can run both in parallel to facilitate a smooth transition. 

Prerequisites

Before you set up the Entra ID User sync, ensure the following in your Entra ID set up:

• Users exist
• Devices are enrolled
• Devices are assigned to users
• Groups and permissions are set correctly.

In Syncro, ensure that the email addresses of any existing Contacts/End Users are up to date and match the Entra ID users.

These are foundational best practices so you have a clean experience downstream.

Enable the Sync

You must enable Microsoft Entra ID User Sync for each Organization. 

1. First, navigate to the Syncro Tenant's Details Page. There are four ways you can do this:
   1. From the Microsoft Tenant Integrations page/table, click the hyperlinked name of a Syncro Tenant:
      
   2. From the Organizations page/table, click the hyperlinked name of a Syncro Tenant:
      
   3. From an Organization's Details Page in the INFORMATION section, click the hyperlinked name of the Syncro Tenant:
      
   4. From an Organization's End Users subtab, click Set Up Microsoft User Sync:
      
      Tip: After you've enabled the sync for the first time, you can also use the “Manage” link next to the quick search:
      

The Syncro Tenant Details Page displays:

2. In the Customer Organization's Microsoft User Sync column, click Set Up. The Set Up Microsoft Entra ID User Sync pop-up window appears.
3. Click the down-facing caret to open and check the desired boxes for the User Type, Domain, Office Location, Department, Group, and Microsoft 365 License Status sections:
   
   Note: Users who meet all of the selected criteria will be synced. Microsoft users who match these criteria will also be added to the Organization's End Users Subtab. Checking the “All” box in any section will automatically include future users (e.g., if a new Office Location" is added, users from that location will be included in the sync). Your settings here may impact the initial sync. 
4. Click Enable Sync. The pop-up window closes; the sync is now in progress.
5. Click Close. Once the sync is set up, the Microsoft Entra ID User Sync column displays an “Enabled” status, and a vertical ellipsis () icon appears at the end. Syncro knows about users and devices, but no Syncro assets exist until you install the Syncro agent on the devices. See also: What Gets Synced & When.

Note: The options available after the User Sync shows an “Enabled” status include Edit User Sync Filters and Disable User Sync.

What Gets Synced & When

Once you've set up the Microsoft Entra ID User Sync, Syncro pulls the following Microsoft user data from Entra ID to populate your End Users:

• User Details: Name, Email, Phone, Mobile Phone, Street Address, City, State/Province, Zip/Postal Code, and Job Title.
• Microsoft Data: Assigned Microsoft licensees, Last Activity (i.e. sign In date/time), MFA Status and Method, and User Principal Name.
• Associated Devices: If the Microsoft user has a device in Entra ID with the same MAC address as an Asset in Syncro (i.e. a device with the Syncro agent installed), the sync will link the End User to their associated Assets.

Following any initial sync time, End Users are synced from Microsoft HOURLY, and End User's Details page displays their Microsoft User Details, which includes information about licenses and MFA.

Tip: Use the Microsoft License and Last Microsoft Activity columns in the End Users subtab/table to easily see which End Users are being synced with Entra ID.

About the Initial Sync

If you've filtered your user sync by Group, Syncro won't display any End Users for your Organizations until all of them have been processed. This first-time process may take up to 12 hours. Any users added after the initial sync might also not show up in Syncro for up to 12 hours. (This delay does not apply to syncs not using the Group filter.)

If End Users already exist for an Organization in Syncro but you want to sync with Entra ID, know that Syncro matches based on email address. So if there's an existing End User in Syncro with the same email address as the Microsoft user, Syncro won't create a duplicate. Instead, it will map the existing End User to the Microsoft user for future syncing. Additionally, Syncro only looks for matches within the Organization, so if you have a person who's an End User for multiple Organizations, the sync will only map the Microsoft user to the Organization for which it it syncing. 

About Asset to End-User Assignments

Syncro attempts to auto-assign assets to end users if the Entra device is assigned to a user, and the MAC for that Entra device matches the Syncro asset MAC. When the match succeeds, the asset is automatically assigned to the end-user. You'll see this in both the Owner Information section on the Asset Details Page (in the “Assigned Contact' field) and on the End User Details Page (in the ”Associated Assets" section).

If the match fails, the asset remains unassigned and you must manually assign it to an end user.

About Deleted or Disabled Users

Deleting or disabling a user in Microsoft will NOT delete the End User. Rather, it will mark them as “Disabled in Microsoft.” You can filter the End User table to excludes these:

Similarly, deleting an End User who is mapped to an Entra ID user will NOT delete that user in Microsoft. If that user still exists in Entra ID and still meets the filter criteria for the Organization, Syncro will create a new End User in the next sync.

Edit User Sync Filters or Disable User Sync

If you've added a new group of users on a Microsoft Tenant that don't belong to the same Organization, you may want to edit your user sync filters. To do this, follow these steps:

1. Navigate to a Syncro Tenant's Details Page.
2. In the Organization's Microsoft User Sync column, click the vertical ellipsis ().
3. If you want to adjust the sync filters, select the “Edit User Sync Filters” option. Make your changes in the pop-up window, then click Save.
   Note: Editing sync filters applies to future/ongoing syncs. Any Syncro End Users mapped to Entra ID users who no longer meet your criteria will not be deleted from Syncro; they will no longer be updated. Moving forward, new Syncro End Users will be created only if they meet the new criteria.
4. If you want to disable the sync altogether, select the “Disable User Sync” option. See also About Deleted or Disabled Users.
   Note: Disabling user sync will stop automatic updates from Microsoft Entra ID. Existing users will remain in Syncro, but new users and changes from Entra ID will no longer be synced.
   If you're certain you want to do this, click Disable User Sync in the confirmation pop-up window. Syncro redisplays the Set Up button in the Microsoft User Sync column so you can re-create the sync at any time.

Troubleshooting

If you accidentally sync Entra ID users from the wrong Microsoft Tenant, follow these steps: 

1. From the Syncro Tenant Details page, disable the Entra ID User Sync.
2. Individually delete any Syncro End Users that should not have been created for the Organization. See also: Delete an End User.
3. On the Microsoft Tenant Integrations page, ensure the correct mapping exists between the Microsoft and Syncro Tenants. Depending on what's incorrect, you'll need to take one of the following actions:
   1. Unmap the Syncro Tenant from the incorrect Microsoft Tenant and then remap the correct one.
   2. Re-assign the Organization to the Syncro Tenant that is mapped to the correct Microsoft Tenant.
4. Set up a new Entra ID User Sync from the Syncro Tenant Details page.