Integration profile
Directory source · Microsoft Entra ID
Configure a read-only source and preview identity matching before apply.
Demo baseline · November 13, 2026Connection and scope
App-only Microsoft Graph User.Read.All with admin consent. Secret JSON: clientId, clientSecret; or accessToken. Tenant ID selects the Microsoft token endpoint. Only the public Microsoft Graph origin is used. The complete user collection is paged; missing users are never treated as deletions.
- Transport
graph- External ID
id- Default coalescing path
userPrincipalName
Provider fields
| Key | Label | Example |
|---|---|---|
tenantId | Directory tenant ID | Tenant UUID |
Default mapping
| Source | Target | Transform |
|---|---|---|
givenName | firstName | text |
surname | lastName | text |
userPrincipalName | email | lower |
userPrincipalName | username | lower |
employeeId | employeeNumber | text |
id | ldapCorrelationId | text |
jobTitle | title | text |
Verify and troubleshoot
Preview, apply, and diagnose a directory import. Verify the immutable key, existing-account match, complete pagination and disable thresholds before applying.