Skip to content
IAM built for the AI-Era
Logo

Azure AD Settings

You can sync password resets and changes with Microsoft Entra ID (Azure AD). Before configuring the integration in the Gatekeeper Admin Tool, register an app in Microsoft Entra ID and assign it the required permissions.

Requirements

Before you configure Microsoft Entra ID integration, make sure you have the following:

  • A Microsoft Entra ID tenant
  • The required Microsoft Entra ID subscription

Configuring an App in Microsoft Entra ID

  1. Log in to the Microsoft Entra admin center.
  2. Click Microsoft Entra ID. This opens your organization's directory.
  3. Click App Registrations.
  4. Click New registration.
  5. Enter a name for the app in the Name field.
  6. Using the radio buttons, select the supported account type (Single Tenant or Multitenant).
  7. Click Register. In the following app summary screen, under the Essentials section, make a note (copy) of the Application (client) ID and the Directory (tenant) ID. These will be used for configuration.
  8. In the left navigation of the app summary screen, click Certificates & Secrets.
  9. Click New client secret. Enter a description and set an expiry period using the Expiry dropdown, then click Add.

  10. Copy and securely store the client secret from the Value column. You will need the secret value for configuration.

    Note

    When configuring a sync point (Specops Password Sync), note that this value needs to be pasted in the Provider password field in the Sync Point configuration.

  11. In the Microsoft Entra ID admin center's (left-most) left navigation, click on Microsoft Entra ID, then click on Roles and administrators.

  12. In the list, click on a role that will be sufficient for resetting passwords.

    Note

    For an overview of roles and their permissions, please go to Working with users in Microsoft Graph. Note that the minimum required role for resetting passwords is the Password Administrator role.

  13. Click Add assignments at the top. The Add Assignments sidebar will open on the right.

  14. In the search box, enter the registered app name, click on the app in the search result list, then click Add at the bottom.
  15. Write down or copy the Application (client) ID, Directory (tenant) ID, and the Client Secret, then proceed to configure the Microsoft Entra ID Settings in the Gatekeeper Admin Tool.

Configuring the Microsoft Entra ID Settings in Gatekeeper Admin Tool

  1. In the Gatekeeper Admin Tool, click Azure AD Settings.
  2. In the Azure AD Settings field, click Edit.
  3. Enter the Client ID value in Application (client) ID.
  4. Enter the Tenant ID value in Directory (tenant) ID.
  5. Enter the Client Secret value in Client Secret.
  6. Click OK.
  7. In the right navigation box, click Test connection to see if a connection to Microsoft Entra ID was established.

Once the connection is established, the Gatekeeper will start syncing with Microsoft Entra ID on password reset or password change.