How to Configure Advanced User Sync for Entra ID - Inbound in the Tenant Admin Portal

​

Introduction

This document describes how to configure Advanced User Sync for Microsoft Entra ID - Inbound in the Tenant Admin Portal.

​

Prerequisites

• You must have access to the Tenant Admin Portal.
• An Advanced User Sync profile for Entra ID (Inbound) is already created. To create refer, How to Create Data Mapper Table for Entra ID - Inbound in the Tenant Admin Portal.
• Ensure Advanced User Sync for Microsoft Entra ID is configured in the Microsoft Entra ID Admin Console. To know more, refer How to Configure Advanced User Sync in Microsoft Entra ID Admin Console.
• A Data Mapper Table is created and available for user attribute mapping.
• A Data Filter table is created and available for mapping the Entra ID - Inbound.

​

Steps to Configure Advanced User Sync for Entra ID - Inbound

1. Log in to the Tenant Admin Portal.
2. Go to Agents > Advanced User Sync. The Advanced User Sync page is displayed.
3. Select the preferred Entra ID Advanced User Sync. The Advanced User Sync detail page is displayed.
4. Do the following:
   1. Configure Details Tab
   2. Setup Configuration Tab
   3. Configure Account Tab
   4. Configure Schedule Tab
5. Click Activate. The Confirm Activation pop-up box is displayed.
6. Click Confirm. The Advanced User Sync is configured and activated successfully.
7. (Optional) Go to Action > User Sync.
   Note: Selecting Sync Now immediately triggers a manual synchronization.
   The Sync Now? pop-up box is displayed.
8. Click Confirm. The Success pop-up box is displayed. The user sync completes successfully.

​

Configure Details Tab

This tab is used to view and edit basic information about the Advanced User Sync. Do the following:

1. Update the User Sync Name (Optional).
2. Enter the User Sync Description (Optional).
3. Click Save. The Details tab is configured successfully.

​

Setup Configuration Tab

This tab is used to map user data from Microsoft Entra ID to Oloid and select the Oloid connection where users are added during the inbound user sync. Do the following:

1. Select the data mapper table from the drop-down.
   Note: Click View Tables to review or create a data mapper table, if required.
2. On Add Users to Selected Connection, do one of the following:
   1. Select the Connection option, and then select the required Connection from the drop-down list. OR
   2. Select the Data Filter Table option, and then select the required Data Filter Table from the drop-down list.
      Note: Click View Tables to review or create a data filter table, if required.
3. Enable the Sync FIDO2 Passkeys toggle.
   Note: Only one Microsoft Entra ID account can synchronize FIDO2 passkeys at a time. If another account is already synchronizing FIDO2 passkeys, this option is unavailable.
4. Click Save. The Configuration tab is setup successfully.

​

Configure Account Tab

This tab is used to add and configure the Microsoft Entra ID account details required for inbound user synchronization with Oloid. Do the following:

1. Enter Account Name.
2. Enter API URL.
   Note: The API URL must be set to https://graph.microsoft.com/v1.0/users for Microsoft Entra ID – Inbound user synchronization.
3. Enter Directory ID.
4. Enter Client ID.
   Note: You can find the Directory (tenant) ID and Application (client) ID on the Overview page of the application in the Microsoft Entra ID Admin Console.
   
5. Enter Client Secret.
   Note: You can find the Client Secret on the Certificates & secrets page in the Microsoft Entra ID Admin Console.
   
6. Enter Group.
   Note: To add multiple groups, separate each group with a comma.
   
7. Select Columns from theSelected Columns drop-down list to select the Microsoft Entra ID user attributes to synchronize with Oloid.
   Note: Select one or more attributes.
8. In the Filter Query field, enter a Microsoft Graph filter expression to synchronize only the required user records. Example: accountEnabled eq true and department eq ‘Engineering’.
9. In the Expand Query field, enter related attributes to retrieve additional user information during synchronization. Example: manager($select=displayName,mail,userPrincipalName).
10. In the Max Records field, specify the maximum number of user records to retrieve.
    Note:

    1. Enter a positive number to limit the number of records retrieved.
    2. Enter 0 or leave the field blank to retrieve all available records.
    3. Click Save. The Account tab details section is configured successfully.
    4. Click Test. The Success pop-up box is displayed.
    

​

Configure Schedule Tab

This tab is used to define when the Entra ID – Inbound user sync runs. You can configure the sync to run on a recurring schedule or run once when the sync is activated. Do one of the following: Repeat Every OR Run Once When Activated The Schedule tab is configured successfully.

​

Repeat Every

The Repeat Every section is used torun the user sync on selected days and times. Do the following:

1. Select Repeat Every.
2. Select the required day(s).
   Note: You can select multiple days (if needed).
3. Select the run time in the Runs at field.
   Note: You can add multiple execution time. To do, click +Add to configure additional run times, if required.
4. Select Time Zone from the drop-down.
5. Enter email address(es) in the Send failed job-run alerts to field.
   Note: Separate multiple email addresses with commas.
6. Click Save. The Repeat Every section is configured successfully.

​

Run Once When Activated

The Run Once When Activated section is used to run the sync only once. Do the following:

1. Select Run Once When Activated.
2. Select the date and time in the Select Date & Time field.
3. Select Time Zone from the drop-down.
4. Enter email address(es) in the Send failed job-run alerts to field.
   Note: Separate multiple email addresses with commas.
5. Click Save.

The Run Once When Activated section is configured successfully.

Related Articles

How to Create Data Mapper Table for Entra ID - Inbound in the Tenant Admin Portal How to Configure Advanced User Sync in Microsoft Entra ID Admin Console