General

There are three separate synchronization options to synchronize user data from Azure Active Directory to Enreach Cloud systems.

1. User data synchronization

2. Directory synchronization of users

3. Directory synchronization of directory entries

Synchronization is done as a daily batch job by default.

Reading AzureAD information is done via Azure Graph API. This requires that new application must be registered to Azure Active Directory in Azure portal and rights to read directory data must be granted.

Registering Directory Synchronization on Azure Portal

1. Log in https://portal.azure.com as an administrator

1. Log in https://portal.azure.com as an administrator

2. Select Azure Active Directory -> App registrations -> New application registration

3. Enter describing name for the application, and click Register. Redirect URI: https://discover.enreachvoice.com/

Open

4. Select API Permissions.

1. Add Microsoft Graph -> Application permissions
   
   

   Open

   

2. Add following permissions

   1. Group/ Group.Read.All

   2. User/ User.Read.All
      
      
      

3. Click Grant admin consent and then Yes for confirmation pop-up

4. Make sure that Admin consent status is granted for all permissions

5. Select Certificates & secrets.

1. Add new client secret
   
   

2. Enter a proper description, select Expires = Never and click Add
   
   

3. Copy value of new secret to be sent to Enreach

6. Go to overview tab and copy value of Application (client) ID

• Send Application ID and Secret to Benemen