AI & SaaS Management: Microsoft Entra ID Connector

JumpCloud® AI & SaaS Management gives you visibility and control over shadow IT, including AI and SaaS app usage, within your org. Connectors detect shadow IT without adoption of a browser extension and provide a significant increase to valuable usage and security insights.

The Microsoft Entra ID Connector retrieves users lists and data from the Microsoft Graph API, enabling seamless integration with third-party apps authenticated via Microsoft credentials. It captures new users and login events to keep data accurate and current. This connector also ensures data integrity and security because it is configured via OAuth with read-only permissions.

  • Microsoft Entra ID accounts: Provides an up-to-date list of Microsoft Entra ID users.
  • Third-Party app discovery: Offers visibility into tools connected via "Login with Microsoft," enabling organizations to track app usage and identify potential security risks, particularly in environments with numerous applications.

Considerations

  • Based on your organization’s size, the initial collection of data may take some time, up to an hour. 

Configuring JumpCloud

  1. Log in to the JumpCloud Admin Portal.

Important:

If your data is stored outside of the US, check which login URL you should be using depending on your region, see JumpCloud Data Centers to learn more.

  1. Go to Access > AI & SaaS Management > Settings.
  2. Under AI & SaaS Management Settings, click the Connectors tab, then click + Add Connector.

    JumpCloud AI & SaaS Management Settings Connectors tab, showing the list of active SaaS connectors, with Atlassian displayed in a CONNECTED status.
  1. Select Entra ID and click Connect
  2. Enter a name and click Connect.
  3. Follow the redirect prompts from Microsoft.
  4. You will now see Entra ID in your list of Connectors.

Note:

If permissions are accidentally removed, or if the admin who configured left your organization, the connector will stop working and you will be prompted to Reconnect.

Required Permissions

  • Read all users' full profile: Allows JumpCloud to list the users in your directory.
  • Read applications: Allows JumCloud to list OAuth permissions in your directory.
  • Read directory data: Allows JumCloud to list OAuth permissions in your directory.
  • Manage access to data you have given it access to: Manage OAuth token.

Uninstall/Remove

  • On the Connector’s detail page, click on Delete Connector and follow the prompts.
Back to Top

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case