Connect Administration: Azure/Entra Provisioning

Connect allows you to create, remove, and manage your users through Microsoft Azure via Entra ID. Make sure that you have completed the previous steps outlined in the SSO and Directory Service - Start Here! document beforehand

NOTE: A Connect or Connect with Insights Subscription is required

NOTE: A P1 license in Azure AD is required to setup provisioning. This is found in Azure in Overview > Basic Information > License

NOTE: These instructions presuppose that you have security groups setup in Microsoft Entra ID for the Connect application. If you do not please prepare these first

Setup Provisioning in Microsoft Entra ID

1. Select "Enterprise Applications" in Microsoft Entra ID
   
2. Select "New Application"
3. Select "Create your own application"
4. Name the app "Monotype Connect Provisioning", check the radio button for Integrate any other application you don't find in the gallery (Non-gallery)" and select "Create"
   
5. Once created, navigate to "Provisioning" on the left-hand side
   
6. This will open the provisioning page. Select Manage>Provisioning from the left-hand side
   
7. Select "Automatic" from the drop down menu
8. In a separate tab or window, navigate to connect.extensis.com
9. In Administration>Directory Service select the "Provisioning Configuration" Tab
   

10. Return to the provisioning page in Azure and copy the values from Connect to the matching fields under "Admin Credentials" section

    Authentication Method should be set to: Bearer Authentication
    

11. Select "Test Connection"
12. If the test is successful, save the configuration
13. This will add a "Mappings" section. Under Mappings, select "Provision Microsoft Entra ID Users"
    
14. Uncheck "Delete"
15. Under "Attribute Mappings" remove all but the following attributes:
    userName
    active
    emails[type eq "work"].value
    name.givenName
    name.familyName
16. Save these changes
17. Under Mappings, select "Provision Microsoft Entra ID Groups"
18. Under "Attribute Mappings" remove the externalID attribute
19. Save these changes
20. Return to the Overview page of your Enterprise App registration and select "Users and groups"
21. Select "Add user/group"
22. Click on "None Selected" on the left-hand side
23. Select the groups you wish to add to Connect
    
24. Click "Assign"
25. Navigate to Provisioning and click "Start Provisioning"

Next: Configure Teams in Connect