Skip to main content

Synchronizing Employees from Microsoft Entra ID

Microsoft Users Sync Integration

Updated over a month ago

The Microsoft Users Sync integration allows you to import your collaborators into Arsen.


This native integration eliminates manual provisioning and ensures your employee list is always up to date and securely synchronized.


1 – Objectives

The goal of this procedure is to automatically synchronize employee profiles from Microsoft Entra ID into Arsen through the Microsoft Users Sync integration.

This allows you to:

  • Avoid manual CSV imports

  • Keep your employee list continuously updated when changes occur in Entra ID

  • Ensure all Arsen features rely on accurate, real-time data


2 – Prerequisites

The only prerequisite is that the person performing the setup must be able to authorize the installation of a third-party application on the Microsoft 365 tenant.

To follow best practices, it is recommended to use:


3 – Delegate the integration setup

When an Arsen account is created:

  • Arsen automatically detects your email provider

If your organization uses Microsoft, you can:

  • Perform the installation yourself if you are a Microsoft environment administrator

  • Share the instructions using Share Onboarding Link if another person must perform the integration

3.1 – Send the instructions

To send the setup instructions to an administrator:

  • Click Share Onboarding Link

Arsen onboarding screen showing configuration steps with the “Share Onboarding Link” button highlighted
  • Enter the administrator’s email address. Click Generate Link

Arsen partner portal showing the “Share Onboarding Portal” panel with the “Generate Link” button.
  • Using this link, the recipient can access a limited console available for 15 days.

  • Click on Sync your employees from the shared link and then on Microsoft.


4 – Grant required privileges

To install the integration, ensure you have the rights to grant the following permissions to the Arsen Microsoft Email Delivery application:

  • Directory.Read.All — Read directory data (users, groups)

  • User.Read — Sign in and read user profile

  • User.Read.All — Read all user profiles

  • Group.Read.All — Read properties of all groups

  • GroupMember.Read.All — Read membership of all groups


5 – Install the integration during onboarding

5.1 – Open the module

From your dashboard, click Microsoft Users Sync.

Arsen onboarding section highlighting step 1 “Synchronize your employees from Microsoft Entra”

A drawer opens showing the application details.

Arsen Microsoft Identity Directory window displaying required permissions and the “Connect to Microsoft 365” button

5.2 – Connect the Microsoft account

Click Connect to Microsoft 365.

A Microsoft login window opens — select your Microsoft account.

Microsoft account selection window prompting the user to choose or add an account.

On the permissions page, click Accept.

Microsoft authorization window showing requested permissions for Arsen Directory Sync.

Arsen is now connected to your Entra ID directory.

5.3 – Define which users to synchronize

Available synchronization options:

  • All users in the tenant

  • All users in a group named “arsen” (created beforehand in your AD)

  • Users from one or several Entra groups, including nested groups

⚠️ Warning

Only active users are synchronized.

📚 Note

Nested groups are supported.

Microsoft Identity Directory panel in Arsen showing user synchronization scope options (all users, specific group, or selected groups

Click Save changes and sync users to complete the synchronization.


The process may take a few minutes.


6 – Add employees manually (alternative method)

A manual method exists to add employees.

To learn more about adding users via CSV import, click here.

Did this answer your question?