Controls Microsoft Entra ID (formerly Azure AD) sign-in and user synchronisation for this tenant.

Registering an Application in Microsoft Entra ID

1. Open the Microsoft Entra admin centre — App registrations.
2. Click New registration.
3. Give the application a name (e.g. Jadaptive Sign-In).
4. Under Supported account types, choose the option that matches your organisation (typically Accounts in this organisational directory only).
5. Under Redirect URI, select Web and enter: https://example.com/app/api/microsoft/signin
6. Click Register.
7. Copy the Application (client) ID and the Directory (tenant) ID shown on the Overview page.
8. Go to Certificates & secrets → New client secret, create a secret and copy the Value immediately — it is only shown once.
9. Go to API permissions → Add a permission → Microsoft Graph → Delegated permissions and add openid, profile, email and User.Read. Then click Grant admin consent.

General Settings

Tenant ID

The Directory (tenant) ID GUID from the app registration Overview page. This identifies your Microsoft Entra ID directory. Required.

Primary Domain

The primary Microsoft 365 domain for this tenant (e.g. example.com). Used to resolve the correct Entra ID tenant.

Sign-In Settings

Sign-In Enabled

Activates Microsoft Entra ID sign-in for this tenant.

Client ID

The Application (client) ID from the app registration Overview page.

Client Secret

The client secret Value created under Certificates & secrets. Stored encrypted at rest.

Allow Dynamic Import

When enabled, a user who successfully authenticates via Microsoft but does not yet exist in the platform will be created automatically. When disabled, only pre-imported users may sign in.

Excluded Identities

Email addresses that should never be allowed to sign in via Microsoft, even if their account is otherwise authorised.

Import Settings

Automatic import synchronises Microsoft Entra ID users into the platform on a schedule. It uses a separate application registration (or the same one) with application permissions rather than delegated permissions, so no user interaction is required.

Registering an Application for Import

1. In App registrations, create a new registration (or reuse the sign-in app).
2. Go to API permissions → Add a permission → Microsoft Graph → Application permissions and add User.Read.All and, if you want group-based filtering, GroupMember.Read.All.
3. Click Grant admin consent for your directory.
4. Create a client secret under Certificates & secrets and note the Application (client) ID and secret Value.

Import Enabled

Activates scheduled Microsoft Entra ID user synchronisation.

Graph Client ID

The Application (client) ID of the app registration used for directory import (application permissions).

Graph Client Secret

The client secret for the import application registration. Stored encrypted at rest.

Import Domains

Restrict import to users whose UPN matches one of these domains (e.g. example.com). Leave empty to import all users in the directory.

Import Group IDs

Restrict import to members of these Entra ID groups, specified by Object ID (GUID). Found in Entra admin centre → Groups → <group> → Overview. Leave empty to import all users.