mirror of
https://github.com/netbirdio/docs.git
synced 2026-09-26 16:59:04 +02:00
Trim Microsoft Entra ID IdP sync screenshots (#981)
This commit is contained in:
Brandon Hopkins
Binary file not shown.
|
Before Width: | Height: | Size: 492 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 180 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 84 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 222 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 277 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 226 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 369 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 259 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 127 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 268 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 188 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 504 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 163 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 232 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 282 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 325 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 489 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 180 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 333 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 419 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 410 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 273 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 348 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 336 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 341 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 300 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 496 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 357 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 279 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 435 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 459 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 326 KiB |
BIN
Binary file not shown.
|
Before Width: | Height: | Size: 282 KiB |
@@ -27,13 +27,11 @@ To enable SCIM synchronization in NetBird, navigate to `Integrations > Identity
|
||||
Select your **Microsoft Entra ID** identity provider connector for this integration and click **Continue** to proceed.
|
||||
|
||||
<p>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/select-idp.png" alt="select-identity-provider" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/select-idp.png" alt="The connector picker with the Microsoft Entra ID identity provider selected" className="imagewrapper-big"/>
|
||||
</p>
|
||||
|
||||
This will open a pop-up window featuring a user-friendly wizard, guiding you through the synchronization process between NetBird and Entra ID.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-scim-getting-started.png" alt="Microsoft Entra ID SCIM Getting Started Wizard" className="imagewrapper-big"/>
|
||||
|
||||
## Prerequisites
|
||||
|
||||
Before you begin the integration process, ensure you have the necessary admin permissions in Microsoft Entra ID. You need an Azure user account with at least one of these roles:
|
||||
@@ -45,44 +43,29 @@ Before you begin the integration process, ensure you have the necessary admin pe
|
||||
## Configure SCIM Provisioning in Microsoft Entra ID
|
||||
|
||||
Click on the `Get Started` button to initiate the integration process.
|
||||
A new wizard screen will appear, offering step-by-step instructions for creating and configuring your Microsoft Entra ID application. To simplify the process, the wizard also provides quick-copy buttons for essential information:
|
||||
A new wizard screen will appear, offering step-by-step instructions for creating and configuring your Microsoft Entra ID application. To simplify the process, the wizard also provides quick-copy buttons for the values you will enter in Entra ID, including the SCIM Token Key.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configure-scim.png" alt="Microsoft Entra ID SCIM Configuration Setup" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configure-scim.png" alt="The NetBird SCIM setup wizard step with quick-copy buttons for the values needed in Entra ID" className="imagewrapper-big"/>
|
||||
|
||||
<Note>
|
||||
If you already have a NetBird Enterprise Application in Entra ID with provisioning available, you can configure SCIM on it directly without creating a new one. The App Registration used by the legacy NetBird API integration is a different application type and cannot be reused for SCIM.
|
||||
</Note>
|
||||
|
||||
In the [Azure portal](https://portal.azure.com), navigate to `Azure Active Directory` → `Enterprise applications`.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-enterprise-applications.png" alt="Microsoft Entra ID Enterprise Applications" className="imagewrapper-big"/>
|
||||
|
||||
Click `New application` to create a new enterprise application.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-new-application.png" alt="Microsoft Entra ID New Application Creation" className="imagewrapper-big"/>
|
||||
|
||||
Click `Create your own application`.
|
||||
In the [Azure portal](https://portal.azure.com), navigate to `Azure Active Directory` → `Enterprise applications`. Click `New application`, then `Create your own application`.
|
||||
|
||||
Fill out the application form with the following details:
|
||||
|
||||
* **What's the name of your app?**: `NetBird SCIM`
|
||||
* **What are you looking to do with your application?**: Select `Integrate any other application you don't find in the gallery (Non-gallery)`
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-application-form.png" alt="Microsoft Entra ID Application Form" className="imagewrapper-big"/>
|
||||
|
||||
Click `Create`.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-application-created.png" alt="Microsoft Entra ID Application Created Successfully" className="imagewrapper-big"/>
|
||||
|
||||
### Enable Provisioning
|
||||
|
||||
On the NetBird dashboard click the Continue → button. A new wizard screen will appear, offering step-by-step instructions for enabling provisioning.
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-enable-provisioning.png" alt="Microsoft Entra ID Enable Provisioning Setup" className="imagewrapper-big"/>
|
||||
|
||||
Once the application is created, click `Manage`, then click `Provisioning`.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-provisioning-get-started.png" alt="Microsoft Entra ID Provisioning Get Started" className="imagewrapper-big"/>
|
||||
|
||||
Under the `Create configuration` section, click `connect your application`.
|
||||
|
||||
Fill out the `New provisioning configuration` form with the following details:
|
||||
@@ -101,28 +84,22 @@ Fill out the `New provisioning configuration` form with the following details:
|
||||
See [Microsoft's SCIM compatibility documentation](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/application-provisioning-config-problem-scim-compatibility#flags-to-alter-the-scim-behavior) for more details.
|
||||
</Note>
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-connect-application.png" alt="Microsoft Entra ID Connect Application Configuration" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-connect-application.png" alt="The Entra ID New provisioning configuration form with Bearer authentication, the NetBird Tenant URL, and the Secret token" className="imagewrapper-big"/>
|
||||
|
||||
Click `Test Connection` to verify the SCIM connection. If the connection is successful, click `Create` to save the configuration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-connection-success.png" alt="Microsoft Entra ID Connection Success" className="imagewrapper-big"/>
|
||||
|
||||
### Configure Attribute Mapping
|
||||
|
||||
On the NetBird dashboard click the Continue → button. A new wizard screen will appear, offering step-by-step instructions for configuring attribute mapping.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configure-attribute-mapping.png" alt="Microsoft Entra ID Configure Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
After creating the provisioning configuration, you need to configure the attribute mappings for both groups and users.
|
||||
Navigate to the `Attribute mapping` section.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/attribute-mapping.png" alt="Microsoft Entra ID Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
#### Group Attribute Mapping
|
||||
|
||||
Select the `Groups` tab to configure the group attribute mapping.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-attribute-mapping.png" alt="Microsoft Entra ID Group Attribute Mapping" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-attribute-mapping.png" alt="The Groups attribute mapping list in Entra ID with the externalId row to delete" className="imagewrapper-big"/>
|
||||
|
||||
In the attribute mappings list, locate the `externalId` row and click `Delete`.
|
||||
|
||||
@@ -130,14 +107,10 @@ NetBird matches synchronized groups by `displayName`. Removing the `externalId`
|
||||
|
||||
Click `Save` to apply the updated group attribute mapping configuration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-attribute-mapping-updated.png" alt="Microsoft Entra ID Group Attribute Mapping After Deletion" className="imagewrapper-big"/>
|
||||
|
||||
#### User Attribute Mapping
|
||||
|
||||
Select the `Users` tab to configure the user attribute mapping.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-attribute-mapping.png" alt="Microsoft Entra ID Default User Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
<Note>
|
||||
The default Entra mapping includes around 20 user attributes. NetBird only consumes the attributes listed below. Removing the unused mappings keeps the provisioning logs clean and avoids mapping errors for attributes NetBird does not accept.
|
||||
</Note>
|
||||
@@ -154,8 +127,7 @@ Remove all attribute mappings except for the following:
|
||||
|
||||
Click `Save` to apply the updated user attribute mapping configuration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-attribute-mapping-clean.png" alt="Microsoft Entra ID Updated User Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-attribute-mapping-clean.png" alt="The Users attribute mapping reduced to the seven attributes NetBird consumes" className="imagewrapper-big"/>
|
||||
|
||||
In the attribute mappings list, locate the `externalId` row and click `Edit`.
|
||||
|
||||
@@ -163,12 +135,10 @@ Change the **Source attribute** from `mailNickname` to `objectId`.
|
||||
|
||||
`externalId` is the stable identifier NetBird uses to link a SCIM user record to its Entra user. The Entra default of `mailNickname` is not guaranteed to be set on every user, is not guaranteed to be unique in the directory, and can change. `objectId` is the immutable Entra GUID and is the correct stable identifier. This ensures NetBird continues to recognize the same user across email address or display name changes.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-edit-externalid.png" alt="Microsoft Entra ID Edit External ID Attribute" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-edit-externalid.png" alt="Editing the externalId mapping with the Source attribute set to objectId" className="imagewrapper-big"/>
|
||||
|
||||
Click `Ok` to save the change, then click `Save` to apply the final user attribute mapping configuration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-attribute-mapping-updated.png" alt="Microsoft Entra ID Final User Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
### Why this mapping prevents duplicate users
|
||||
|
||||
Set `externalId` to `objectId` **before** the first sync. Getting this wrong is the most common cause of duplicate user accounts, so it is worth understanding why.
|
||||
@@ -191,9 +161,6 @@ Because the match is on `objectId` and not on email, the two accounts can show t
|
||||
|
||||
On the NetBird dashboard click the Continue → button. A new wizard screen will appear, offering step-by-step instructions for assigning users and groups.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-assign-users-and-groups.png" alt="Microsoft Entra ID Assign Users and Groups" className="imagewrapper-big"/>
|
||||
|
||||
|
||||
To enable SCIM synchronization of users and groups to NetBird, you need to assign them to the NetBird enterprise application.
|
||||
|
||||
In the Azure portal, navigate to your NetBird enterprise application:
|
||||
@@ -203,18 +170,13 @@ In the Azure portal, navigate to your NetBird enterprise application:
|
||||
* Select the users and groups you want to synchronize to NetBird
|
||||
* Click `Assign` to save the assignments
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-assign-users-groups.png" alt="Microsoft Entra ID Assign Users and Groups Interface" className="imagewrapper-big"/>
|
||||
|
||||
## Start Provisioning
|
||||
|
||||
On the NetBird dashboard click the Continue → button. A new wizard screen will appear, offering step-by-step instructions for starting the provisioning.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-run-provisioning.png" alt="Microsoft Entra ID Run Provisioning" className="imagewrapper-big"/>
|
||||
|
||||
|
||||
After assigning users and groups, navigate back to the provisioning configuration, click `Overview`, then click the `Start provisioning` button to enable automatic synchronization. The first sync will begin shortly after provisioning is started.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-provisioning-started.png" alt="Microsoft Entra ID Provisioning Started" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-provisioning-started.png" alt="The provisioning Overview page in Entra ID after clicking Start provisioning" className="imagewrapper-big"/>
|
||||
|
||||
Once started, Microsoft Entra ID will automatically synchronize the assigned users and groups to NetBird.
|
||||
|
||||
@@ -243,20 +205,17 @@ have been successfully synchronized by navigating to `Team > Users` in your NetB
|
||||
You can access some configuration settings inside the NetBird Dashboard. E.g. if you want to regenerate the authentication token or want to filter users and groups based on a specific prefix.
|
||||
Simply go to the Integrations page and click the settings icon of your integration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configuration-options.png" alt="Microsoft Entra ID SCIM Configuration Options" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configuration-options.png" alt="The enabled Entra ID SCIM integration on the NetBird Integrations page with its settings icon" className="imagewrapper-big"/>
|
||||
|
||||
### Regenerate Auth Token
|
||||
|
||||
If your authentication token has expired or you need to update it, click **Regenerate Auth Token** in the configuration window to generate a new token.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-regenerate-auth-token.png" alt="Microsoft Entra ID Regenerate Authentication Token" className="imagewrapper-big"/>
|
||||
|
||||
|
||||
### Groups to be synchronized
|
||||
|
||||
By default, all groups assigned to the NetBird application in Entra will be synchronized. If you want to synchronize only assigned groups that start with a specific prefix, you can specify them in the filter. Keep in mind that the prefix matching is case-sensitive.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-prefix.png" alt="Microsoft Entra ID Group Prefix Filter" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-prefix.png" alt="The group prefix filter in the NetBird SCIM integration settings" className="imagewrapper-big"/>
|
||||
|
||||
Click `Continue` to proceed to the next step.
|
||||
|
||||
@@ -264,4 +223,3 @@ Click `Continue` to proceed to the next step.
|
||||
|
||||
By default, all users from the groups assigned to the NetBird application in Entra will be synchronized. If you want to further filter and synchronize only users from specific assigned groups, you can specify those group names in the filter. The group name matching is case-sensitive.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-prefix.png" alt="Microsoft Entra ID User Prefix Filter" className="imagewrapper-big"/>
|
||||
|
||||
@@ -23,12 +23,12 @@ Navigate to `Integrations` in the left menu to access the `Identity Provider` in
|
||||
Select your **Microsoft Entra ID** identity provider connector for this integration and click **Continue** to proceed.
|
||||
|
||||
<p>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/microsoft-entra-id-sync/select-idp.png" alt="select-identity-provider" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/microsoft-entra-id-sync/select-idp.png" alt="The connector picker with the Microsoft Entra ID identity provider selected" className="imagewrapper-big"/>
|
||||
</p>
|
||||
|
||||
This will open a pop-up window featuring a user-friendly wizard, guiding you through the synchronization process between NetBird and Azure AD.
|
||||
|
||||
|
||||
|
||||
|
||||
## Prerequisites
|
||||
|
||||
@@ -46,8 +46,6 @@ To check your permissions:
|
||||
* Expand the `Manage` tab and click on `Roles and administrators` in the left menu.
|
||||
* Look for your username and verify if you're assigned any of the above roles.
|
||||
|
||||
|
||||
|
||||
If you don't have the required permissions, contact your Azure AD administrator to grant you the appropriate role before proceeding with the NetBird integration.
|
||||
|
||||
## Create and Configure a Microsoft Entra ID Application for NetBird Integration
|
||||
@@ -61,21 +59,13 @@ A new wizard screen will appear, offering step-by-step instructions for creating
|
||||
* Redirect Type
|
||||
* Redirect URI
|
||||
|
||||
|
||||
For convenience, click on [Azure Active Directory](https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview) (step 1). That will open the Azure dashboard. Navigate to `App registrations` in the left menu and then click `+New registration`.
|
||||
|
||||
For convenience, click on [Azure Active Directory](https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview) (step 1). That will open the Azure dashboard. Navigate to `App registrations` in the left menu and then click `+New registration` as indicated below:
|
||||
|
||||
|
||||
|
||||
Fill in the required information:
|
||||
|
||||
|
||||
|
||||
After entering all required information, click the `Register` button at the bottom of the form to finalize the application registration process.
|
||||
Fill in the registration form with the name, supported account type, and redirect URI shown in the NetBird wizard, using its copy buttons. Then click the `Register` button at the bottom of the form to finalize the application registration process.
|
||||
|
||||
Upon successful registration, you'll be redirected to a confirmation screen similar to the following:
|
||||
|
||||
|
||||
|
||||
|
||||
Copy and securely store the generated `Application (client) ID` and `Directory (tenant) ID` as you will need them shortly.
|
||||
|
||||
@@ -83,23 +73,13 @@ Copy and securely store the generated `Application (client) ID` and `Directory (
|
||||
|
||||
On the NetBird dashboard click the `Continue →` button. A new wizard screen will appear, this time, offering step-by-step instructions for setting up API permissions.
|
||||
|
||||
|
||||
|
||||
Back to Azure, in the `App registrations` screen, click on `Manage` in the left menu to expand it and then click on `API permissions`:
|
||||
|
||||
|
||||
Back to Azure, in the `App registrations` screen, click on `Manage` in the left menu to expand it and then click on `API permissions`.
|
||||
|
||||
Look for the `+ Add a permission` button, located near the top of the permissions list and click on it.
|
||||
|
||||
|
||||
|
||||
A new pop-up window will appear, asking you to select an API. Click on `Microsoft Graph`.
|
||||
|
||||
|
||||
|
||||
On the next screen, click on the `Application permissions` button, which will let you select the appropriate permissions for NetBird to function correctly with your Microsoft Entra ID environment.
|
||||
|
||||
|
||||
On the next screen, click on the `Application permissions` button (not `Delegated permissions`), which will let you select the appropriate permissions for NetBird to function correctly with your Microsoft Entra ID environment.
|
||||
|
||||
To assign user permissions:
|
||||
|
||||
@@ -107,39 +87,31 @@ To assign user permissions:
|
||||
* In the search results, click on the `User` tab to expand it and view the available permissions.
|
||||
* Click on the checkbox to select and enable the `User.Read.All` permission.
|
||||
|
||||
|
||||
|
||||
|
||||
The `User.Read.All` permission allows NetBird to read the full set of profile properties, group memberships, and reports of the signed-in user and other users in your organization.
|
||||
|
||||
Next, repeat the procedure. This time, search for `Group.Read.All` and click on the checkbox to enable it as shown below:
|
||||
|
||||
|
||||
Next, repeat the procedure. This time, search for `Group.Read.All`, expand the `Group` tab, and enable it the same way.
|
||||
|
||||
Once done, click the `Add permissions` button. You will see a few warnings:
|
||||
|
||||
|
||||
|
||||
|
||||
Locate the `Grant admin consent for [Your Organization Name]` button (you'll find it next to `+Add a permission` button). Click on it to grant the required permissions.
|
||||
|
||||
A confirmation dialog will appear, asking you to verify this action. Review the permissions listed in the dialog and click `Yes` to confirm. Wait for the process to complete, this may take a few seconds.
|
||||
|
||||
Once finished, the status of the permissions should change to `Granted for [Your Organization Name]`. Verify that all selected permissions now show a green checkmark, indicating they've been successfully granted:
|
||||
|
||||
|
||||
Once finished, the status of the permissions should change to `Granted for [Your Organization Name]`. Verify that all selected permissions now show a green checkmark, indicating they've been successfully granted.
|
||||
|
||||
## Create a Client Secret for Secure NetBird-Entra ID Authentication
|
||||
|
||||
Back to the NetBird dashboard, click the `Continue →` button. A new wizard screen will appear, showing instructions for generating a client secret in Entra ID.
|
||||
|
||||
|
||||
|
||||
On Azure, click on the `Certificates & secrets` button in the left menu to open the management page. Click on `+New client secret` as shown below. Choose an expiration time that suits your security needs and click the `Add` button.
|
||||
|
||||
|
||||
On Azure, click on the `Certificates & secrets` button in the left menu to open the management page. Click on `+New client secret`. Choose an expiration time that suits your security needs and click the `Add` button.
|
||||
|
||||
A new client secret will be generated and displayed on the screen. Copy and securely store the `Value` field immediately, as you will needed in the next step.
|
||||
|
||||
|
||||
|
||||
|
||||
## Enter Application ID and Directory ID in NetBird
|
||||
|
||||
@@ -147,7 +119,7 @@ Paste the secret `Value` from the previous step into NetBird and click the `Cont
|
||||
|
||||
Paste the values and click the `Continue →` button.
|
||||
|
||||
|
||||
|
||||
|
||||
## Choose Groups to Synchronize from Entra ID
|
||||
At this stage, NetBird is set to synchronize all groups from your Microsoft Entra ID by default. You have two options:
|
||||
@@ -155,7 +127,7 @@ At this stage, NetBird is set to synchronize all groups from your Microsoft Entr
|
||||
* If you want to synchronize all groups, simply click the `Continue →` button.
|
||||
* To synchronize only specific groups, click the `+ Add group filter` button, which will open a new panel where you can set criteria to include or exclude groups.
|
||||
|
||||
|
||||
|
||||
|
||||
## Choose Users to Synchronize from Entra ID
|
||||
After configuring group synchronization, you'll now set up user synchronization. Similar than before, NetBird is configured to synchronize all users from your Microsoft Entra ID by default.
|
||||
@@ -167,8 +139,6 @@ After configuring group synchronization, you'll now set up user synchronization.
|
||||
You can modify these synchronization settings later if necessary.
|
||||
</Note>
|
||||
|
||||
|
||||
|
||||
After configuring user and group synchronization, the setup wizard will finalize the process and you'll automatically return to the main Identity Provider screen.
|
||||
|
||||
On this screen, you'll see two key indicators of successful integration:
|
||||
@@ -186,14 +156,12 @@ These indicators confirm that:
|
||||
You can manually trigger a sync or adjust settings by clicking on the Microsoft Entra ID section in the Identity Provider screen
|
||||
</Note>
|
||||
|
||||
|
||||
|
||||
|
||||
## Verify the Integration
|
||||
|
||||
To verify the synchronization, navigate to `Teams > Users` in the left menu.
|
||||
You should see all the users and groups from your Microsoft Entra ID environment listed in the NetBird dashboard.
|
||||
|
||||
|
||||
|
||||
You can now proceed to configure [access control policies](/manage/access-control/manage-network-access#creating-policies) using the synchronized groups to allow or deny access to the
|
||||
synchronized users.
|
||||
|
||||
@@ -31,7 +31,7 @@ Before you begin the integration process, ensure you have the necessary admin pe
|
||||
|
||||
To enable SCIM synchronization in NetBird, navigate to `Integrations > Identity Provider Sync` in your NetBird dashboard.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-connect.png" alt="Microsoft Entra ID SCIM Integration Connection" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-connect.png" alt="The Connect Entra ID (SCIM) button on the NetBird Identity Provider Sync tab" className="imagewrapper-big"/>
|
||||
|
||||
<Note>
|
||||
Before starting the Entra ID SCIM integration you will need to be logged in via Microsoft Login. <br/>
|
||||
@@ -41,50 +41,32 @@ To enable SCIM synchronization in NetBird, navigate to `Integrations > Identity
|
||||
Click the `Connect Microsoft Entra ID` button to begin the configuration process.
|
||||
This action will trigger a pop-up window that will present you with a user-friendly wizard, guiding you through the synchronization process between NetBird and Entra ID.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-scim-getting-started.png" alt="Microsoft Entra ID SCIM Getting Started Wizard" className="imagewrapper-big"/>
|
||||
|
||||
|
||||
## Configure SCIM Provisioning in Microsoft Entra ID
|
||||
|
||||
Click on the `Get Started` button to initiate the integration process.
|
||||
A new wizard screen will appear, offering step-by-step instructions for creating and configuring your Microsoft Entra ID application. To simplify the process, the wizard also provides quick-copy buttons for essential information:
|
||||
A new wizard screen will appear, offering step-by-step instructions for creating and configuring your Microsoft Entra ID application. To simplify the process, the wizard also provides quick-copy buttons for the values you will enter in Entra ID, including the SCIM Token Key.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configure-scim.png" alt="Microsoft Entra ID SCIM Configuration Setup" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configure-scim.png" alt="The NetBird SCIM setup wizard step with quick-copy buttons for the values needed in Entra ID" className="imagewrapper-big"/>
|
||||
|
||||
<Note>
|
||||
If you already have a NetBird Enterprise Application in Entra ID with provisioning available, you can configure SCIM on it directly without creating a new one. The App Registration used by the legacy NetBird API integration is a different application type and cannot be reused for SCIM.
|
||||
</Note>
|
||||
|
||||
In the [Azure portal](https://portal.azure.com), navigate to `Azure Active Directory` → `Enterprise applications`.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-enterprise-applications.png" alt="Microsoft Entra ID Enterprise Applications" className="imagewrapper-big"/>
|
||||
|
||||
Click `New application` to create a new enterprise application.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-new-application.png" alt="Microsoft Entra ID New Application Creation" className="imagewrapper-big"/>
|
||||
|
||||
Click `Create your own application`.
|
||||
In the [Azure portal](https://portal.azure.com), navigate to `Azure Active Directory` → `Enterprise applications`. Click `New application`, then `Create your own application`.
|
||||
|
||||
Fill out the application form with the following details:
|
||||
|
||||
* **What's the name of your app?**: `NetBird SCIM`
|
||||
* **What are you looking to do with your application?**: Select `Integrate any other application you don't find in the gallery (Non-gallery)`
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-application-form.png" alt="Microsoft Entra ID Application Form" className="imagewrapper-big"/>
|
||||
|
||||
Click `Create`.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-application-created.png" alt="Microsoft Entra ID Application Created Successfully" className="imagewrapper-big"/>
|
||||
|
||||
### Enable Provisioning
|
||||
|
||||
On the NetBird dashboard click the Continue → button. A new wizard screen will appear, offering step-by-step instructions for enabling provisioning.
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-enable-provisioning.png" alt="Microsoft Entra ID Enable Provisioning Setup" className="imagewrapper-big"/>
|
||||
|
||||
Once the application is created, click `Manage`, then click `Provisioning`.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-provisioning-get-started.png" alt="Microsoft Entra ID Provisioning Get Started" className="imagewrapper-big"/>
|
||||
|
||||
Under the `Create configuration` section, click `connect your application`.
|
||||
|
||||
Fill out the `New provisioning configuration` form with the following details:
|
||||
@@ -99,28 +81,22 @@ Fill out the `New provisioning configuration` form with the following details:
|
||||
See [Microsoft's SCIM compatibility documentation](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/application-provisioning-config-problem-scim-compatibility#flags-to-alter-the-scim-behavior) for more details.
|
||||
</Note>
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-connect-application.png" alt="Microsoft Entra ID Connect Application Configuration" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-connect-application.png" alt="The Entra ID New provisioning configuration form with Bearer authentication, the NetBird Tenant URL, and the Secret token" className="imagewrapper-big"/>
|
||||
|
||||
Click `Test Connection` to verify the SCIM connection. If the connection is successful, click `Create` to save the configuration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-connection-success.png" alt="Microsoft Entra ID Connection Success" className="imagewrapper-big"/>
|
||||
|
||||
### Configure Attribute Mapping
|
||||
|
||||
On the NetBird dashboard click the Continue → button. A new wizard screen will appear, offering step-by-step instructions for configuring attribute mapping.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configure-attribute-mapping.png" alt="Microsoft Entra ID Configure Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
After creating the provisioning configuration, you need to configure the attribute mappings for both groups and users.
|
||||
Navigate to the `Attribute mapping` section.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/attribute-mapping.png" alt="Microsoft Entra ID Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
#### Group Attribute Mapping
|
||||
|
||||
Select the `Groups` tab to configure the group attribute mapping.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-attribute-mapping.png" alt="Microsoft Entra ID Group Attribute Mapping" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-attribute-mapping.png" alt="The Groups attribute mapping list in Entra ID with the externalId row to delete" className="imagewrapper-big"/>
|
||||
|
||||
In the attribute mappings list, locate the `externalId` row and click `Delete`.
|
||||
|
||||
@@ -128,14 +104,10 @@ NetBird matches synchronized groups by `displayName`. Removing the `externalId`
|
||||
|
||||
Click `Save` to apply the updated group attribute mapping configuration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-attribute-mapping-updated.png" alt="Microsoft Entra ID Group Attribute Mapping After Deletion" className="imagewrapper-big"/>
|
||||
|
||||
#### User Attribute Mapping
|
||||
|
||||
Select the `Users` tab to configure the user attribute mapping.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-attribute-mapping.png" alt="Microsoft Entra ID Default User Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
<Note>
|
||||
The default Entra mapping includes around 20 user attributes. NetBird only consumes the attributes listed below. Removing the unused mappings keeps the provisioning logs clean and avoids mapping errors for attributes NetBird does not accept.
|
||||
</Note>
|
||||
@@ -152,8 +124,7 @@ Remove all attribute mappings except for the following:
|
||||
|
||||
Click `Save` to apply the updated user attribute mapping configuration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-attribute-mapping-clean.png" alt="Microsoft Entra ID Updated User Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-attribute-mapping-clean.png" alt="The Users attribute mapping reduced to the seven attributes NetBird consumes" className="imagewrapper-big"/>
|
||||
|
||||
In the attribute mappings list, locate the `externalId` row and click `Edit`.
|
||||
|
||||
@@ -161,19 +132,14 @@ Change the **Source attribute** from `mailNickname` to `objectId`.
|
||||
|
||||
`externalId` is the stable identifier NetBird uses to link a SCIM user record to its Entra user. The Entra default of `mailNickname` is not guaranteed to be set on every user, is not guaranteed to be unique in the directory, and can change. `objectId` is the immutable Entra GUID and is the correct stable identifier. This ensures NetBird continues to recognize the same user across email address or display name changes.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-edit-externalid.png" alt="Microsoft Entra ID Edit External ID Attribute" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-edit-externalid.png" alt="Editing the externalId mapping with the Source attribute set to objectId" className="imagewrapper-big"/>
|
||||
|
||||
Click `Apply` to save the change, then click `Save` to apply the final user attribute mapping configuration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-attribute-mapping-updated.png" alt="Microsoft Entra ID Final User Attribute Mapping" className="imagewrapper-big"/>
|
||||
|
||||
## Assign Users and Groups
|
||||
|
||||
On the NetBird dashboard click the Continue → button. A new wizard screen will appear, offering step-by-step instructions for assigning users and groups.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-assign-users-and-groups.png" alt="Microsoft Entra ID Assign Users and Groups" className="imagewrapper-big"/>
|
||||
|
||||
|
||||
To enable SCIM synchronization of users and groups to NetBird, you need to assign them to the NetBird enterprise application.
|
||||
|
||||
In the Azure portal, navigate to your NetBird enterprise application:
|
||||
@@ -183,18 +149,13 @@ In the Azure portal, navigate to your NetBird enterprise application:
|
||||
* Select the users and groups you want to synchronize to NetBird
|
||||
* Click `Assign` to save the assignments
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-assign-users-groups.png" alt="Microsoft Entra ID Assign Users and Groups Interface" className="imagewrapper-big"/>
|
||||
|
||||
## Start Provisioning
|
||||
|
||||
On the NetBird dashboard click the Continue → button. A new wizard screen will appear, offering step-by-step instructions for starting the provisioning.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-run-provisioning.png" alt="Microsoft Entra ID Run Provisioning" className="imagewrapper-big"/>
|
||||
|
||||
|
||||
After assigning users and groups, navigate back to the provisioning configuration, click `Overview`, then click the `Start provisioning` button to enable automatic synchronization. The first sync will begin shortly after provisioning is started.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-provisioning-started.png" alt="Microsoft Entra ID Provisioning Started" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-provisioning-started.png" alt="The provisioning Overview page in Entra ID after clicking Start provisioning" className="imagewrapper-big"/>
|
||||
|
||||
Once started, Microsoft Entra ID will automatically synchronize the assigned users and groups to NetBird.
|
||||
|
||||
@@ -223,20 +184,17 @@ have been successfully synchronized by navigating to `Team > Users` in your NetB
|
||||
You can access some configuration settings inside the NetBird Dashboard. E.g. if you want to regenerate the authentication token or want to filter users and groups based on a specific prefix.
|
||||
Simply go to the Integrations page and click the settings icon of your integration.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configuration-options.png" alt="Microsoft Entra ID SCIM Configuration Options" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-configuration-options.png" alt="The enabled Entra ID SCIM integration on the NetBird Integrations page with its settings icon" className="imagewrapper-big"/>
|
||||
|
||||
### Regenerate Auth Token
|
||||
|
||||
If your authentication token has expired or you need to update it, click **Regenerate Auth Token** in the configuration window to generate a new token.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-regenerate-auth-token.png" alt="Microsoft Entra ID Regenerate Authentication Token" className="imagewrapper-big"/>
|
||||
|
||||
|
||||
### Groups to be synchronized
|
||||
|
||||
By default, all groups assigned to the NetBird application in Entra will be synchronized. If you want to synchronize only assigned groups that start with a specific prefix, you can specify them in the filter. Keep in mind that the prefix matching is case-sensitive.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-prefix.png" alt="Microsoft Entra ID Group Prefix Filter" className="imagewrapper-big"/>
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-group-prefix.png" alt="The group prefix filter in the NetBird SCIM integration settings" className="imagewrapper-big"/>
|
||||
|
||||
Click `Continue` to proceed to the next step.
|
||||
|
||||
@@ -244,4 +202,3 @@ Click `Continue` to proceed to the next step.
|
||||
|
||||
By default, all users from the groups assigned to the NetBird application in Entra will be synchronized. If you want to further filter and synchronize only users from specific assigned groups, you can specify those group names in the filter. The group name matching is case-sensitive.
|
||||
|
||||
<img src="/docs-static/img/manage/team/idp-sync/entra-id-scim-sync/entra-user-prefix.png" alt="Microsoft Entra ID User Prefix Filter" className="imagewrapper-big"/>
|
||||
|
||||
@@ -25,7 +25,7 @@ To get started, navigate to [Integrations](https://app.netbird.io/integrations)
|
||||
`Identity Provider` integration. Click the `Entra ID (Azure AD)` button. This action will trigger a pop-up window that will
|
||||
present you with a user-friendly wizard, guiding you through the synchronization process between NetBird and Azure AD.
|
||||
|
||||
|
||||
|
||||
|
||||
## Prerequisites
|
||||
|
||||
@@ -43,8 +43,6 @@ To check your permissions:
|
||||
* Expand the `Manage` tab and click on `Roles and administrators` in the left menu.
|
||||
* Look for your username and verify if you're assigned any of the above roles.
|
||||
|
||||
|
||||
|
||||
If you don't have the required permissions, contact your Azure AD administrator to grant you the appropriate role before proceeding with the NetBird integration.
|
||||
|
||||
## Create and Configure a Microsoft Entra ID Application for NetBird Integration
|
||||
@@ -58,21 +56,13 @@ A new wizard screen will appear, offering step-by-step instructions for creating
|
||||
* Redirect Type
|
||||
* Redirect URI
|
||||
|
||||
|
||||
For convenience, click on [Azure Active Directory](https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview) (step 1). That will open the Azure dashboard. Navigate to `App registrations` in the left menu and then click `+New registration`.
|
||||
|
||||
For convenience, click on [Azure Active Directory](https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview) (step 1). That will open the Azure dashboard. Navigate to `App registrations` in the left menu and then click `+New registration` as indicated below:
|
||||
|
||||
|
||||
|
||||
Fill in the required information:
|
||||
|
||||
|
||||
|
||||
After entering all required information, click the `Register` button at the bottom of the form to finalize the application registration process.
|
||||
Fill in the registration form with the name, supported account type, and redirect URI shown in the NetBird wizard, using its copy buttons. Then click the `Register` button at the bottom of the form to finalize the application registration process.
|
||||
|
||||
Upon successful registration, you'll be redirected to a confirmation screen similar to the following:
|
||||
|
||||
|
||||
|
||||
|
||||
Copy and securely store the generated `Application (client) ID` and `Directory (tenant) ID` as you will need them shortly.
|
||||
|
||||
@@ -80,23 +70,13 @@ Copy and securely store the generated `Application (client) ID` and `Directory (
|
||||
|
||||
On the NetBird dashboard click the `Continue →` button. A new wizard screen will appear, this time, offering step-by-step instructions for setting up API permissions.
|
||||
|
||||
|
||||
|
||||
Back to Azure, in the `App registrations` screen, click on `Manage` in the left menu to expand it and then click on `API permissions`:
|
||||
|
||||
|
||||
Back to Azure, in the `App registrations` screen, click on `Manage` in the left menu to expand it and then click on `API permissions`.
|
||||
|
||||
Look for the `+ Add a permission` button, located near the top of the permissions list and click on it.
|
||||
|
||||
|
||||
|
||||
A new pop-up window will appear, asking you to select an API. Click on `Microsoft Graph`.
|
||||
|
||||
|
||||
|
||||
On the next screen, click on the `Application permissions` button, which will let you select the appropriate permissions for NetBird to function correctly with your Microsoft Entra ID environment.
|
||||
|
||||
|
||||
On the next screen, click on the `Application permissions` button (not `Delegated permissions`), which will let you select the appropriate permissions for NetBird to function correctly with your Microsoft Entra ID environment.
|
||||
|
||||
To assign user permissions:
|
||||
|
||||
@@ -104,39 +84,31 @@ To assign user permissions:
|
||||
* In the search results, click on the `User` tab to expand it and view the available permissions.
|
||||
* Click on the checkbox to select and enable the `User.Read.All` permission.
|
||||
|
||||
|
||||
|
||||
|
||||
The `User.Read.All` permission allows NetBird to read the full set of profile properties, group memberships, and reports of the signed-in user and other users in your organization.
|
||||
|
||||
Next, repeat the procedure. This time, search for `Group.Read.All` and click on the checkbox to enable it as shown below:
|
||||
|
||||
|
||||
Next, repeat the procedure. This time, search for `Group.Read.All`, expand the `Group` tab, and enable it the same way.
|
||||
|
||||
Once done, click the `Add permissions` button. You will see a few warnings:
|
||||
|
||||
|
||||
|
||||
|
||||
Locate the `Grant admin consent for [Your Organization Name]` button (you’ll find it next to `+Add a permission` button). Click on it to grant the required permissions.
|
||||
|
||||
A confirmation dialog will appear, asking you to verify this action. Review the permissions listed in the dialog and click `Yes` to confirm. Wait for the process to complete, this may take a few seconds.
|
||||
|
||||
Once finished, the status of the permissions should change to `Granted for [Your Organization Name]`. Verify that all selected permissions now show a green checkmark, indicating they've been successfully granted:
|
||||
|
||||
|
||||
Once finished, the status of the permissions should change to `Granted for [Your Organization Name]`. Verify that all selected permissions now show a green checkmark, indicating they've been successfully granted.
|
||||
|
||||
## Create a Client Secret for Secure NetBird-Entra ID Authentication
|
||||
|
||||
Back to the NetBird dashboard, click the `Continue →` button. A new wizard screen will appear, showing instructions for generating a client secret in Entra ID.
|
||||
|
||||
|
||||
|
||||
On Azure, click on the `Certificates & secrets` button in the left menu to open the management page. Click on `+New client secret` as shown below. Choose an expiration time that suits your security needs and click the `Add` button.
|
||||
|
||||
|
||||
On Azure, click on the `Certificates & secrets` button in the left menu to open the management page. Click on `+New client secret`. Choose an expiration time that suits your security needs and click the `Add` button.
|
||||
|
||||
A new client secret will be generated and displayed on the screen. Copy and securely store the `Value` field immediately, as you will needed in the next step.
|
||||
|
||||
|
||||
|
||||
|
||||
## Enter Application ID and Directory ID in NetBird
|
||||
|
||||
@@ -144,7 +116,7 @@ Paste the secret `Value` from the previous step into NetBird and click the `Cont
|
||||
|
||||
Paste the values and click the `Continue →` button.
|
||||
|
||||
|
||||
|
||||
|
||||
## Choose Groups to Synchronize from Entra ID
|
||||
At this stage, NetBird is set to synchronize all groups from your Microsoft Entra ID by default. You have two options:
|
||||
@@ -152,7 +124,7 @@ At this stage, NetBird is set to synchronize all groups from your Microsoft Entr
|
||||
* If you want to synchronize all groups, simply click the `Continue →` button.
|
||||
* To synchronize only specific groups, click the `+ Add group filter` button, which will open a new panel where you can set criteria to include or exclude groups.
|
||||
|
||||
|
||||
|
||||
|
||||
## Choose Users to Synchronize from Entra ID
|
||||
After configuring group synchronization, you'll now set up user synchronization. Similar than before, NetBird is configured to synchronize all users from your Microsoft Entra ID by default.
|
||||
@@ -164,8 +136,6 @@ After configuring group synchronization, you'll now set up user synchronization.
|
||||
You can modify these synchronization settings later if necessary.
|
||||
</Note>
|
||||
|
||||
|
||||
|
||||
After configuring user and group synchronization, the setup wizard will finalize the process and you'll automatically return to the main Identity Provider screen.
|
||||
|
||||
On this screen, you'll see two key indicators of successful integration:
|
||||
@@ -183,15 +153,13 @@ These indicators confirm that:
|
||||
You can manually trigger a sync or adjust settings by clicking on the Microsoft Entra ID section in the Identity Provider screen
|
||||
</Note>
|
||||
|
||||
|
||||
|
||||
|
||||
## Verify the Integration
|
||||
|
||||
To verify the synchronization, navigate to `Teams > Users` in the left menu.
|
||||
You should see all the users and groups from your Microsoft Entra ID environment listed in the NetBird dashboard.
|
||||
|
||||
|
||||
|
||||
You can now proceed to configure [access control policies](/manage/access-control/manage-network-access#creating-policies) using the synchronized groups to allow or deny access to the
|
||||
synchronized users.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user