This is a step-by-step guide for integrating your Azure Active Directory with PackageX Receive to allow fetching information on Recipients and optionally Users.
Recipients are contacts that cannot login to the application. They can potentially include the full directory. Enabling this integration removes the need to manually create or update recipients, or import them via CSV file.
Users are people who can login to the PackageX dashboard/application using SSO. These only include the directory users that are assigned to the SSO Enterprise Application created in the Azure Portal.
Configuring SSO is a required pre-requisite to the Azure AD sync.
You need to first provide your Enterprise Application in Azure permissions to access directory data
Search “k ” in Azure Portal and open it
Click “All applications” and search for your enterprise application and open it
Select “API Permissions” → “Add a permission” → “Microsoft Graph”
Select “Application permissions”
For syncing Recipients
only, the following permissions are required:
GroupMember.Read.All
Group.Read.All
User.Read.All
For syncing Users
, in addition to the three permissions above, the following is required:
Application.Read.All
Click “Add permissions” at the bottom
Open your Enterprise Application, select “Permissions”, then click “Grant admin consent for Name of your Azure Tenant
A pop-up may appear asking you to verify identity. Click “Accept” once the review dialog appears