How does the Microsoft Entra ID sync work?

ONARKEN provides the ability to synchronise users directly from Microsoft Entra ID, streamlining user management by leveraging group mappings and ensuring that permissions are consistently applied.

How Synchronisation Works

1. Role-to-Group Mapping:

   • Within ONARKEN, you can map ONARKEN Roles to corresponding Microsoft Entra ID Groups.
   • This mapping determines which ONARKEN permissions are assigned to users based on their group memberships in Entra ID.
     
     

2. User Import and Synchronisation:

   • All Microsoft Entra ID users with a valid group mapping in ONARKEN will be imported into the system.
   • These users will inherit the permissions configured in the mapped ONARKEN Roles.
     
     

3. Ongoing Updates with Microsoft Graph Delta API:

   • After the initial synchronisation, ONARKEN uses the Microsoft Graph Delta API to monitor changes in Entra ID.
   • Any changes (additions, updates, or deletions) to users in mapped groups will be reflected in ONARKEN during subsequent synchronisations.