Set Up Microsoft Entra ID User Sync
Table of Contents
The Microsoft Entra ID User Sync is currently in EA (Early Access). Click here to participate.
The Microsoft Entra ID User Sync is a direct integration between Syncro and Microsoft Entra ID, and is for any MSP or internal IT organization whose Contacts/End Users are on the Microsoft platform.
Once you've integrated Microsoft and mapped your Syncro Tenants, you can set up Entra ID User Sync to add and update Syncro Contacts/End Users based on the User Type, Department, Office Location, Domain, and/or Group assigned to those users within the Microsoft Tenant.
The Microsoft Entra ID User Sync provides:
- The pre-population of Contacts/End Users in Syncro, based on those you've already set up in Microsoft Entra ID.
- Ongoing consistency between Syncro and Microsoft Entra ID as users are added, removed, or changed.
Notes:
- The Microsoft Entra ID User Sync replaces the former Syncro-Entra ID Sync integration, but you can continue using the legacy sync. If desired, you can run both in parallel to facilitate a smooth transition.
- Customers are in the process of being renamed to (Customer) Organizations, and Contacts to End Users. You may see both in Syncro for the time being.
Enable the Sync
You must enable Microsoft Entra ID User Sync for each (Customer) Organization.
- First, navigate to the Syncro Tenant's Details Page. There are five ways you can do this:
- From the Microsoft Tenant Management page/table, click the hyperlinked name of a Syncro Tenant:
- From the (Customer) Organizations page/table, click the hyperlinked name of a Syncro Tenant:
- From an Organization's Details Page in the INFORMATION section, click the hyperlinked name of the Syncro Tenant:
- From an Organization's End Users subtab, click the Set Up MS User Sync button:
Tip: After you've enabled the sync for the first time, you can also use the “Manage” link on this subtab:
- From the Microsoft Tenant Management page/table, click the hyperlinked name of a Syncro Tenant:
The Syncro Tenant Details Page displays:
- In the Customer Organization's Microsoft User Sync column, click Set Up. Syncro displays the Set Up Microsoft Entra ID User Sync pop-up window.
- Click the down-facing caret to open and check the desired boxes for the User Type, Domain, Office Location, Department, and Group sections:
Note: Users who meet all of the selected criteria will be synced. Microsoft users who match these criteria will also be added to the Organization's End Users Subtab during the hourly Entra ID user sync. Checking the “All” box in any section will automatically include future users (e.g., if a new Office Location" is added, users from that location will be included in the sync). - Click Enable Sync. Syncro closes the pop-up window and informs you that the sync is in progress.
- Click Close. Once the sync is set up, the Microsoft Entra ID User Sync column displays an “Enabled” status, and a vertical ellipsis (
) icon appears at the end.
Note: The options available after the User Sync shows an “Enabled” status include Edit User Sync Filters and Disable User Sync.
What Gets Synced & When
Once you've set up the Microsoft Entra ID User Sync, Syncro pulls the the following Microsoft user data from Entra ID to populate your Contact/End User records:
- User Details: Name, Email, Phone, Mobile Phone, Street Address, City, State/Province, Zip/Postal Code, and Job Title.
- Associated Devices: If the Microsoft user has a device in Entra ID with the same MAC address as an Asset in Syncro, the sync will link the Contact/End User to their associated Assets.
- Microsoft Data: Assigned Microsoft licensees, Last Sign In Date/Time, MFA Status and Method, User Principal Name, and Object ID.
Contacts/End Users are synced from Microsoft hourly, and End User's Details page will display their Microsoft User Details, which includes information about their licenses and MFA.
Edit User Sync Filters or Disable User Sync
If you've added a new group of users on a Microsoft Tenant that don't belong to the same (Customer) Organization, you may want to edit your user sync filters. To do this, follow these steps:
- Navigate to a Syncro Tenant's Details Page.
- In the Customer Organization's Microsoft User Sync column, click the vertical ellipsis (
).
- If you want to adjust the sync filters, select the “Edit User Sync Filters” option. Make your changes in the pop-up window, then click Save.
Note: Editing sync filters applies to future/ongoing syncs. Any Syncro End Users mapped to Entra ID users who no longer meet your criteria will not be deleted from Syncro; they will no longer be updated. Moving forward, new Syncro End Users will be created only if they meet the new criteria. - If you want to disable the sync altogether, select the “Disable User Sync” option.
Note: Disabling user sync will stop automatic updates from Microsoft Entra ID. Existing users will remain in Syncro, but new users and changes from Entra ID will no longer be synced.
If you're certain you want to do this, click Disable User Sync in the confirmation pop-up window. Syncro redisplays the Set Up button in the MS Entra ID User Sync column so you can re-create the sync at any time.
Troubleshooting
If you accidentally sync Entra ID users from the wrong Microsoft Tenant, follow these steps:
- From the Syncro Tenant Details page, disable the Entra ID User Sync.
- Individually delete any Syncro Contacts/End Users that should not have been created for the (Customer) Organization. See also: Delete an End User.
- On the Microsoft Tenant Management page, ensure the correct mapping exists between the Microsoft and Syncro Tenants. Depending on what's incorrect, you'll need to take one of the following actions:
- Unmap the Syncro Tenant from the incorrect Microsoft Tenant and then remap the correct one.
- Re-assign the Customer Organization to the Syncro Tenant that is mapped to the correct Microsoft Tenant.
- Set up a new Entra ID User Sync from the Syncro Tenant Details page.