See how Ramp uses ConductorOne
ConductorOne

ConductorOne Docs

Azure Active Directory connector

Integrations with the applications from which ConductorOne pulls identity data are called connectors.

Overview

Azure Active Directory (Azure AD) is a Microsoft cloud-based identity and access management service. ConductorOne integrates with your Azure AD account to provide visibility and permission management on users, groups, application, and roles.

Availability

General availability. The Azure Active Directory integration is available to all ConductorOne users.

Capabilities

  • Sync users from Azure AD to ConductorOne
  • Entitlements Supported:
    • Azure AD Groups
    • Azure AD User Roles
    • Azure AD Application Roles

Requirements

When connecting to your Azure AD environment, you will need:

  • Super Administrator role in ConductorOne
  • Global Administrator in Azure AD

Integrate your Azure AD instance

Step 1: Set up the Azure AD connector

  1. In ConductorOne, click Integrations > Azure Active Directory.
  2. If this is your first Azure AD integration, the integration form opens automatically. Otherwise, click Add Connector.
  3. Click Next.

Step 2: Log in with OAuth

  1. Click Login with OAuth.

  2. Log in and authorize ConductorOne with your Azure AD instance. In order for the integration to work properly, you must consent to all permissions:

Step 3: Grant permissions to the ConductorOne app

  1. In the Azure AD control panel, go to Enterprise Applications.

  2. Click the ConductorOne Integration app (not to be confused with the ConductorOne SSO app, which is used to log into ConductorOne, not to synchronize your data).

    If the ConductorOne Integration app doesn’t appear in the list of apps right away, wait a minute and click Refresh.

  1. On the ConductorOne Integration page, click Permissions on the left side.

  2. Click Grant admin consent for … on the ConductorOne Integration app permissions page.

Step 4: Complete integration

  1. Return to the Azure AD integration in ConductorOne by clicking the Azure Active Directory tile on the Integrations page.
  2. Click the Azure Active Directory connector link that shows today’s date in the Connected on column.
  3. Click Login with OAuth a second time to complete the process and authorize ConductorOne to obtain an access token with the permissions you’ve just granted.

That’s it! Your Azure Active Directory instance is now integrated with ConductorOne.