Benefits<\/strong><\/h3>\n\n\n\nThis integration with JumpCloud allows for:<\/p>\n\n\n\n
\n- Secure, persistent connectivity between JumpCloud and M365<\/li>\n\n\n\n
- Importing pre-existing M365 accounts into JumpCloud<\/li>\n\n\n\n
- Exporting (provisioning) new accounts into M365 from JumpCloud<\/li>\n\n\n\n
- Continual synchronization from JumpCloud to M365 accounts<\/li>\n\n\n\n
- End user self-service account management from the JumpCloud User Portal <\/li>\n\n\n\n
- Security Assertion Markup Language (SAML) Single Sign-on (SSO) users can log in to JumpCloud and M365 with the same set of credentials<\/li>\n<\/ul>\n\n\n\n
Considerations<\/strong><\/h3>\n\n\n\n![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>
Warning:<\/strong> \n\n- Don\u2019t authorize\/create multiple instances of a cloud directory integration to the same M365 domain. If you do, users bound to multiple M365\/Entra ID instances could be suspended in your M365\/Entra ID directory if you unbind that user from one of the instances. You can avoid this by deactivating sync for multiple M365\/Entra ID directory instances for the same domain.<\/li>\n\n\n\n
- Be aware that after you deactivate sync for a M365\/Entra ID instance and domain, all information specific to that M365\/Entra ID directory integration in the JumpCloud Admin Portal will be permanently deleted and cannot be recovered by simply reactivating sync.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
\n- App passwords<\/a> may be necessary to authenticate legacy endpoints where multi-factor authentication (MFA) is configured in M365<\/li>\n\n\n\n
- JumpCloud user accounts are synced with their M365 user account based on the primary email address <\/em>used in M365<\/li>\n\n\n\n
- If multiple M365 tenants are configured for JumpCloud’s Directory Sync and a JumpCloud user is bound to more than one M365 tenant, only the M365 tenant with the JumpCloud user’s matching M365 primary email address<\/em> will be synced<\/li>\n\n\n\n
- At this time, JumpCloud doesn’t support integration with GoDaddy’s implementation of M365. This version has limited identity management capabilities that require SSO login with GoDaddy’s services to operate appropriately. Because of these requirements, we are prohibited from making changes to identities with the GoDaddy integration<\/li>\n\n\n\n
- Don’t import users that you don’t intend to manage with JumpCloud. You have 48 hours to remove unwanted users and to contact your Technical Account Manager to avoid being charged for any users you remove after import <\/li>\n\n\n\n
- If the password takeover functionality has been disabled for your JumpCloud organization, then the password only syncs when the user or admin changes it. In addition, active users with passwords will receive password reset emails from each Cloud Directory to which the user is associated<\/li>\n\n\n\n
- M365\/Entra ID group management is only supported for security groups at this time<\/li>\n<\/ul>\n\n\n\n
Prerequisites<\/strong><\/h3>\n\n\n\n\n- An active M365 domain<\/li>\n\n\n\n
- A user with the following administrator roles in M365:\n
\n- Privileged role administrator<\/li>\n\n\n\n
- Groups administrator<\/li>\n\n\n\n
- Users administrator<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- We also recommend that you have a Global administrator service account<\/li>\n<\/ul>\n\n\n\n
M365 Integration Scenarios<\/strong><\/h2>\n\n\n\nYou can integrate M365 with JumpCloud in the following two ways:<\/p>\n\n\n\n
\n- Taking over existing M365 accounts<\/li>\n\n\n\n
- Provisioning new M365 accounts<\/li>\n<\/ol>\n\n\n\n
Taking Over Existing M365 Accounts<\/strong><\/h3>\n\n\n\nWhen you import existing M365 accounts and bind them to the M365 directory you\u2019ve enabled for sync, JumpCloud \u201ctakes over\u201d the accounts and becomes the manager and password authority for those accounts. <\/p>\n\n\n\n
Provisioning New M365 Accounts<\/strong><\/h3>\n\n\n\nAccount provisioning involves creating and maintaining user accounts and their attributes. New M365 accounts can be provisioned in M365 or in JumpCloud.<\/p>\n\n\n\n
M365-Initiated Provisioning<\/strong><\/h4>\n\n\n\nWhen an account is created in M365, a temporary password can be sent to an alternate email address, which lets users gain access to their account. <\/p>\n\n\n\n
When you create a user account in M365, users are provisioned in the following way:<\/p>\n\n\n\n
\n- Import the user into JumpCloud.<\/li>\n\n\n\n
- Bind the user to the M365 directory.<\/li>\n\n\n\n
- The user resets their password in the JumpCloud User Portal.<\/li>\n\n\n\n
- Account synchronization is complete.<\/li>\n<\/ol>\n\n\n\n
JumpCloud-Initiated Provisioning<\/strong><\/h4>\n\n\n\nWhen you create new users in JumpCloud that don\u2019t exist in Microsoft, JumpCloud creates user accounts (provisions) with the JumpCloud user\u2019s credentials and attributes. For the new account to be provisioned to M365, the account must have an email address of the primary M365 domain that is synced with JumpCloud. This is useful if your organization intends to use JumpCloud to manage your M365 deployment.<\/p>\n\n\n\n
When creating an account in JumpCloud, an activation email can be sent to an alternate email address. Alternatively, admins can set a temporary password during creation.
To send an activation email to an alternate email address:<\/strong><\/p>\n\n\n\n
\n- Add the new user to JumpCloud.\n
\n- Bind the user to the M365 directory.<\/li>\n\n\n\n
- Leave Specify initial password<\/strong> unchecked.<\/li>\n\n\n\n
- After saving the user, you will be prompted to send the activation email.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
- The user will click the link in the activation email that was sent to the address you provided in step 1b and set their password.<\/li>\n\n\n\n
- The user logs in to the JumpCloud User Portal with the password they set in step 2.<\/li>\n\n\n\n
- Account synchronization is complete.<\/li>\n<\/ol>\n\n\n\n
To set a temporary password for the user during creation<\/strong>:<\/p>\n\n\n\n
\n- Log in the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to User Management<\/strong> > Users<\/strong>.<\/li>\n\n\n\n
- Click ( + <\/strong>), then select Manual user entry<\/strong>.<\/li>\n\n\n\n
- Specify details for the user, making sure to set the following attributes as follows:\n
\n- The Company Email<\/strong> address you specify for the user is on the domain of the M365 directory you want to provision the user to.<\/li>\n\n\n\n
- For Password Settings<\/strong>, select Specify initial password<\/strong>, and then specify the user\u2019s initial password.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
- Select the Directories<\/strong> tab, then select the M365 directory that matches the Company Email<\/strong> address you specified for the user.<\/li>\n\n\n\n
- Click save user<\/strong>. The user\u2019s account, including the initial password you set, are provisioned to M365. It may take up to 60 seconds for the user account to be created in Microsoft.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>
Note:<\/strong> \nWhen you go to your M365 administrator dashboard, you’ll see the new user in the user’s list. You can now manage licensing and permissions for the user from Microsoft. Keep in mind that it may take up to a minute for M365 to create the account. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
User Flows<\/strong><\/h2>\n\n\n\nAfter you connect a user to an M365 directory, the flow differs slightly for staged and active users:<\/p>\n\n\n\n
Staged User Flow<\/strong><\/h3>\n\n\n\n\n- Staged user without a password<\/strong>: After you bind a staged user without a password to an external directory and then change their user state to active, you can choose to send the user an Activation email that tells them how to register their account. After the user registers their account, creates an account password, and logs in to their JumpCloud User Portal, their password is synced to the directories they\u2019re associated with. <\/li>\n\n\n\n
- Staged user with a password<\/strong>: After you bind a staged user with a password to an external directory and then change their user state to active, you can choose to send the user a Welcome email that tells them to log in to the User Portal. After they log in to their JumpCloud User Portal, their password is synced to the directories they\u2019re associated with.<\/li>\n\n\n\n
- Staged user access in M365<\/strong>: When binding a Staged user to M365, if JumpCloud does not find an existing M365 user to sync, the user will be created in an Active state with a randomized password. This will allow the user account to receive emails, but no login will be possible. However, if JumpCloud finds that the user already exists in M365, JumpCloud will NOT dispatch a password. This means the user may continue to login to their existing M365 account if it already exists. In either case, once the user logs in to JumpCloud\u2019s User Portal for the first time, the password will be synced to M365.<\/li>\n<\/ul>\n\n\n\n
Active User Flow<\/strong><\/h3>\n\n\n\n\n- Active user with a password<\/strong>: After you bind an active user with a password to an external directory, the user receives an email that informs them about that directory to which they\u2019ve been added, and notifies them to synchronize their password by logging into their JumpCloud User Portal. When the user logs in, they see a modal informing them that their password has been updated.<\/li>\n\n\n\n
- Active user without a password<\/strong>: After you bind an active user without a password to an external directory, the user\u2019s password will be synchronized once a password is set by you or the user, and the user logs in to their JumpCloud User Portal.<\/li>\n<\/ul>\n\n\n\n
Additional Resources<\/h4>\n\n\n\n\n- Enroll<\/strong>:\n
\n- Provisioning and Deprovisioning Users<\/a><\/li>\n\n\n\n
- Troubleshooting M365 Directory Integrations<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Show me<\/strong>: \n
\n- M365 Directory Sync<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
JumpCloud offers direct integration with Microsoft\u00ae 365\u2122 (M365) so you can manage M365 users from the JumpCloud Admin Portal. Their passwords […]<\/p>\n","protected":false},"author":207,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2954,2998],"support_tag":[],"coauthors":[2843],"acf":[],"yoast_head":"\n
Microsoft 365 Directory Integration Overview - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft 365 Directory Integration Overview\" \/>\n<meta property=\"og:description\" content=\"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-18T23:24:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"sashaharrington\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\",\"url\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\",\"name\":\"Microsoft 365 Directory Integration Overview - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:11:47+00:00\",\"dateModified\":\"2024-10-18T23:24:29+00:00\",\"description\":\"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Microsoft 365 Directory Integration Overview\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft 365 Directory Integration Overview - JumpCloud","description":"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","og_locale":"en_US","og_type":"article","og_title":"Microsoft 365 Directory Integration Overview","og_description":"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.","og_url":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","og_site_name":"JumpCloud","article_modified_time":"2024-10-18T23:24:29+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes","Written by":"sashaharrington"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","url":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","name":"Microsoft 365 Directory Integration Overview - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:11:47+00:00","dateModified":"2024-10-18T23:24:29+00:00","description":"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Microsoft 365 Directory Integration Overview"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/207"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246\/revisions"}],"predecessor-version":[{"id":116570,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246\/revisions\/116570"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=76246"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=76246"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=76246"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=76246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Considerations<\/strong><\/h3>\n\n\n\n<\/p><\/div>
Warning:<\/strong> \n\n- Don\u2019t authorize\/create multiple instances of a cloud directory integration to the same M365 domain. If you do, users bound to multiple M365\/Entra ID instances could be suspended in your M365\/Entra ID directory if you unbind that user from one of the instances. You can avoid this by deactivating sync for multiple M365\/Entra ID directory instances for the same domain.<\/li>\n\n\n\n
- Be aware that after you deactivate sync for a M365\/Entra ID instance and domain, all information specific to that M365\/Entra ID directory integration in the JumpCloud Admin Portal will be permanently deleted and cannot be recovered by simply reactivating sync.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
\n- App passwords<\/a> may be necessary to authenticate legacy endpoints where multi-factor authentication (MFA) is configured in M365<\/li>\n\n\n\n
- JumpCloud user accounts are synced with their M365 user account based on the primary email address <\/em>used in M365<\/li>\n\n\n\n
- If multiple M365 tenants are configured for JumpCloud’s Directory Sync and a JumpCloud user is bound to more than one M365 tenant, only the M365 tenant with the JumpCloud user’s matching M365 primary email address<\/em> will be synced<\/li>\n\n\n\n
- At this time, JumpCloud doesn’t support integration with GoDaddy’s implementation of M365. This version has limited identity management capabilities that require SSO login with GoDaddy’s services to operate appropriately. Because of these requirements, we are prohibited from making changes to identities with the GoDaddy integration<\/li>\n\n\n\n
- Don’t import users that you don’t intend to manage with JumpCloud. You have 48 hours to remove unwanted users and to contact your Technical Account Manager to avoid being charged for any users you remove after import <\/li>\n\n\n\n
- If the password takeover functionality has been disabled for your JumpCloud organization, then the password only syncs when the user or admin changes it. In addition, active users with passwords will receive password reset emails from each Cloud Directory to which the user is associated<\/li>\n\n\n\n
- M365\/Entra ID group management is only supported for security groups at this time<\/li>\n<\/ul>\n\n\n\n
Prerequisites<\/strong><\/h3>\n\n\n\n\n- An active M365 domain<\/li>\n\n\n\n
- A user with the following administrator roles in M365:\n
\n- Privileged role administrator<\/li>\n\n\n\n
- Groups administrator<\/li>\n\n\n\n
- Users administrator<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- We also recommend that you have a Global administrator service account<\/li>\n<\/ul>\n\n\n\n
M365 Integration Scenarios<\/strong><\/h2>\n\n\n\nYou can integrate M365 with JumpCloud in the following two ways:<\/p>\n\n\n\n
\n- Taking over existing M365 accounts<\/li>\n\n\n\n
- Provisioning new M365 accounts<\/li>\n<\/ol>\n\n\n\n
Taking Over Existing M365 Accounts<\/strong><\/h3>\n\n\n\nWhen you import existing M365 accounts and bind them to the M365 directory you\u2019ve enabled for sync, JumpCloud \u201ctakes over\u201d the accounts and becomes the manager and password authority for those accounts. <\/p>\n\n\n\n
Provisioning New M365 Accounts<\/strong><\/h3>\n\n\n\nAccount provisioning involves creating and maintaining user accounts and their attributes. New M365 accounts can be provisioned in M365 or in JumpCloud.<\/p>\n\n\n\n
M365-Initiated Provisioning<\/strong><\/h4>\n\n\n\nWhen an account is created in M365, a temporary password can be sent to an alternate email address, which lets users gain access to their account. <\/p>\n\n\n\n
When you create a user account in M365, users are provisioned in the following way:<\/p>\n\n\n\n
\n- Import the user into JumpCloud.<\/li>\n\n\n\n
- Bind the user to the M365 directory.<\/li>\n\n\n\n
- The user resets their password in the JumpCloud User Portal.<\/li>\n\n\n\n
- Account synchronization is complete.<\/li>\n<\/ol>\n\n\n\n
JumpCloud-Initiated Provisioning<\/strong><\/h4>\n\n\n\nWhen you create new users in JumpCloud that don\u2019t exist in Microsoft, JumpCloud creates user accounts (provisions) with the JumpCloud user\u2019s credentials and attributes. For the new account to be provisioned to M365, the account must have an email address of the primary M365 domain that is synced with JumpCloud. This is useful if your organization intends to use JumpCloud to manage your M365 deployment.<\/p>\n\n\n\n
When creating an account in JumpCloud, an activation email can be sent to an alternate email address. Alternatively, admins can set a temporary password during creation.
To send an activation email to an alternate email address:<\/strong><\/p>\n\n\n\n
\n- Add the new user to JumpCloud.\n
\n- Bind the user to the M365 directory.<\/li>\n\n\n\n
- Leave Specify initial password<\/strong> unchecked.<\/li>\n\n\n\n
- After saving the user, you will be prompted to send the activation email.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
- The user will click the link in the activation email that was sent to the address you provided in step 1b and set their password.<\/li>\n\n\n\n
- The user logs in to the JumpCloud User Portal with the password they set in step 2.<\/li>\n\n\n\n
- Account synchronization is complete.<\/li>\n<\/ol>\n\n\n\n
To set a temporary password for the user during creation<\/strong>:<\/p>\n\n\n\n
\n- Log in the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to User Management<\/strong> > Users<\/strong>.<\/li>\n\n\n\n
- Click ( + <\/strong>), then select Manual user entry<\/strong>.<\/li>\n\n\n\n
- Specify details for the user, making sure to set the following attributes as follows:\n
\n- The Company Email<\/strong> address you specify for the user is on the domain of the M365 directory you want to provision the user to.<\/li>\n\n\n\n
- For Password Settings<\/strong>, select Specify initial password<\/strong>, and then specify the user\u2019s initial password.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
- Select the Directories<\/strong> tab, then select the M365 directory that matches the Company Email<\/strong> address you specified for the user.<\/li>\n\n\n\n
- Click save user<\/strong>. The user\u2019s account, including the initial password you set, are provisioned to M365. It may take up to 60 seconds for the user account to be created in Microsoft.<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>
Note:<\/strong> \nWhen you go to your M365 administrator dashboard, you’ll see the new user in the user’s list. You can now manage licensing and permissions for the user from Microsoft. Keep in mind that it may take up to a minute for M365 to create the account. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
User Flows<\/strong><\/h2>\n\n\n\nAfter you connect a user to an M365 directory, the flow differs slightly for staged and active users:<\/p>\n\n\n\n
Staged User Flow<\/strong><\/h3>\n\n\n\n\n- Staged user without a password<\/strong>: After you bind a staged user without a password to an external directory and then change their user state to active, you can choose to send the user an Activation email that tells them how to register their account. After the user registers their account, creates an account password, and logs in to their JumpCloud User Portal, their password is synced to the directories they\u2019re associated with. <\/li>\n\n\n\n
- Staged user with a password<\/strong>: After you bind a staged user with a password to an external directory and then change their user state to active, you can choose to send the user a Welcome email that tells them to log in to the User Portal. After they log in to their JumpCloud User Portal, their password is synced to the directories they\u2019re associated with.<\/li>\n\n\n\n
- Staged user access in M365<\/strong>: When binding a Staged user to M365, if JumpCloud does not find an existing M365 user to sync, the user will be created in an Active state with a randomized password. This will allow the user account to receive emails, but no login will be possible. However, if JumpCloud finds that the user already exists in M365, JumpCloud will NOT dispatch a password. This means the user may continue to login to their existing M365 account if it already exists. In either case, once the user logs in to JumpCloud\u2019s User Portal for the first time, the password will be synced to M365.<\/li>\n<\/ul>\n\n\n\n
Active User Flow<\/strong><\/h3>\n\n\n\n\n- Active user with a password<\/strong>: After you bind an active user with a password to an external directory, the user receives an email that informs them about that directory to which they\u2019ve been added, and notifies them to synchronize their password by logging into their JumpCloud User Portal. When the user logs in, they see a modal informing them that their password has been updated.<\/li>\n\n\n\n
- Active user without a password<\/strong>: After you bind an active user without a password to an external directory, the user\u2019s password will be synchronized once a password is set by you or the user, and the user logs in to their JumpCloud User Portal.<\/li>\n<\/ul>\n\n\n\n
Additional Resources<\/h4>\n\n\n\n\n- Enroll<\/strong>:\n
\n- Provisioning and Deprovisioning Users<\/a><\/li>\n\n\n\n
- Troubleshooting M365 Directory Integrations<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Show me<\/strong>: \n
\n- M365 Directory Sync<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
JumpCloud offers direct integration with Microsoft\u00ae 365\u2122 (M365) so you can manage M365 users from the JumpCloud Admin Portal. Their passwords […]<\/p>\n","protected":false},"author":207,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2954,2998],"support_tag":[],"coauthors":[2843],"acf":[],"yoast_head":"\n
Microsoft 365 Directory Integration Overview - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft 365 Directory Integration Overview\" \/>\n<meta property=\"og:description\" content=\"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-18T23:24:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"sashaharrington\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\",\"url\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\",\"name\":\"Microsoft 365 Directory Integration Overview - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:11:47+00:00\",\"dateModified\":\"2024-10-18T23:24:29+00:00\",\"description\":\"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Microsoft 365 Directory Integration Overview\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft 365 Directory Integration Overview - JumpCloud","description":"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","og_locale":"en_US","og_type":"article","og_title":"Microsoft 365 Directory Integration Overview","og_description":"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.","og_url":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","og_site_name":"JumpCloud","article_modified_time":"2024-10-18T23:24:29+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes","Written by":"sashaharrington"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","url":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","name":"Microsoft 365 Directory Integration Overview - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:11:47+00:00","dateModified":"2024-10-18T23:24:29+00:00","description":"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Microsoft 365 Directory Integration Overview"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/207"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246\/revisions"}],"predecessor-version":[{"id":116570,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246\/revisions\/116570"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=76246"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=76246"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=76246"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=76246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/p><\/div>
Warning:<\/strong> \n
- \n
- Don\u2019t authorize\/create multiple instances of a cloud directory integration to the same M365 domain. If you do, users bound to multiple M365\/Entra ID instances could be suspended in your M365\/Entra ID directory if you unbind that user from one of the instances. You can avoid this by deactivating sync for multiple M365\/Entra ID directory instances for the same domain.<\/li>\n\n\n\n
- Be aware that after you deactivate sync for a M365\/Entra ID instance and domain, all information specific to that M365\/Entra ID directory integration in the JumpCloud Admin Portal will be permanently deleted and cannot be recovered by simply reactivating sync.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- App passwords<\/a> may be necessary to authenticate legacy endpoints where multi-factor authentication (MFA) is configured in M365<\/li>\n\n\n\n
- JumpCloud user accounts are synced with their M365 user account based on the primary email address <\/em>used in M365<\/li>\n\n\n\n
- If multiple M365 tenants are configured for JumpCloud’s Directory Sync and a JumpCloud user is bound to more than one M365 tenant, only the M365 tenant with the JumpCloud user’s matching M365 primary email address<\/em> will be synced<\/li>\n\n\n\n
- At this time, JumpCloud doesn’t support integration with GoDaddy’s implementation of M365. This version has limited identity management capabilities that require SSO login with GoDaddy’s services to operate appropriately. Because of these requirements, we are prohibited from making changes to identities with the GoDaddy integration<\/li>\n\n\n\n
- Don’t import users that you don’t intend to manage with JumpCloud. You have 48 hours to remove unwanted users and to contact your Technical Account Manager to avoid being charged for any users you remove after import <\/li>\n\n\n\n
- If the password takeover functionality has been disabled for your JumpCloud organization, then the password only syncs when the user or admin changes it. In addition, active users with passwords will receive password reset emails from each Cloud Directory to which the user is associated<\/li>\n\n\n\n
- M365\/Entra ID group management is only supported for security groups at this time<\/li>\n<\/ul>\n\n\n\n
Prerequisites<\/strong><\/h3>\n\n\n\n
- \n
- An active M365 domain<\/li>\n\n\n\n
- A user with the following administrator roles in M365:\n
- \n
- Privileged role administrator<\/li>\n\n\n\n
- Groups administrator<\/li>\n\n\n\n
- Users administrator<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- We also recommend that you have a Global administrator service account<\/li>\n<\/ul>\n\n\n\n
M365 Integration Scenarios<\/strong><\/h2>\n\n\n\n
You can integrate M365 with JumpCloud in the following two ways:<\/p>\n\n\n\n
- \n
- Taking over existing M365 accounts<\/li>\n\n\n\n
- Provisioning new M365 accounts<\/li>\n<\/ol>\n\n\n\n
Taking Over Existing M365 Accounts<\/strong><\/h3>\n\n\n\n
When you import existing M365 accounts and bind them to the M365 directory you\u2019ve enabled for sync, JumpCloud \u201ctakes over\u201d the accounts and becomes the manager and password authority for those accounts. <\/p>\n\n\n\n
Provisioning New M365 Accounts<\/strong><\/h3>\n\n\n\n
Account provisioning involves creating and maintaining user accounts and their attributes. New M365 accounts can be provisioned in M365 or in JumpCloud.<\/p>\n\n\n\n
M365-Initiated Provisioning<\/strong><\/h4>\n\n\n\n
When an account is created in M365, a temporary password can be sent to an alternate email address, which lets users gain access to their account. <\/p>\n\n\n\n
When you create a user account in M365, users are provisioned in the following way:<\/p>\n\n\n\n
- \n
- Import the user into JumpCloud.<\/li>\n\n\n\n
- Bind the user to the M365 directory.<\/li>\n\n\n\n
- The user resets their password in the JumpCloud User Portal.<\/li>\n\n\n\n
- Account synchronization is complete.<\/li>\n<\/ol>\n\n\n\n
JumpCloud-Initiated Provisioning<\/strong><\/h4>\n\n\n\n
When you create new users in JumpCloud that don\u2019t exist in Microsoft, JumpCloud creates user accounts (provisions) with the JumpCloud user\u2019s credentials and attributes. For the new account to be provisioned to M365, the account must have an email address of the primary M365 domain that is synced with JumpCloud. This is useful if your organization intends to use JumpCloud to manage your M365 deployment.<\/p>\n\n\n\n
When creating an account in JumpCloud, an activation email can be sent to an alternate email address. Alternatively, admins can set a temporary password during creation.
To send an activation email to an alternate email address:<\/strong><\/p>\n\n\n\n- \n
- Add the new user to JumpCloud.\n
- \n
- Bind the user to the M365 directory.<\/li>\n\n\n\n
- Leave Specify initial password<\/strong> unchecked.<\/li>\n\n\n\n
- After saving the user, you will be prompted to send the activation email.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
- The user will click the link in the activation email that was sent to the address you provided in step 1b and set their password.<\/li>\n\n\n\n
- The user logs in to the JumpCloud User Portal with the password they set in step 2.<\/li>\n\n\n\n
- Account synchronization is complete.<\/li>\n<\/ol>\n\n\n\n
To set a temporary password for the user during creation<\/strong>:<\/p>\n\n\n\n
- \n
- Log in the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to User Management<\/strong> > Users<\/strong>.<\/li>\n\n\n\n
- Click ( + <\/strong>), then select Manual user entry<\/strong>.<\/li>\n\n\n\n
- Specify details for the user, making sure to set the following attributes as follows:\n
- \n
- The Company Email<\/strong> address you specify for the user is on the domain of the M365 directory you want to provision the user to.<\/li>\n\n\n\n
- For Password Settings<\/strong>, select Specify initial password<\/strong>, and then specify the user\u2019s initial password.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
- Select the Directories<\/strong> tab, then select the M365 directory that matches the Company Email<\/strong> address you specified for the user.<\/li>\n\n\n\n
- Click save user<\/strong>. The user\u2019s account, including the initial password you set, are provisioned to M365. It may take up to 60 seconds for the user account to be created in Microsoft.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
When you go to your M365 administrator dashboard, you’ll see the new user in the user’s list. You can now manage licensing and permissions for the user from Microsoft. Keep in mind that it may take up to a minute for M365 to create the account. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
User Flows<\/strong><\/h2>\n\n\n\n
After you connect a user to an M365 directory, the flow differs slightly for staged and active users:<\/p>\n\n\n\n
Staged User Flow<\/strong><\/h3>\n\n\n\n
- \n
- Staged user without a password<\/strong>: After you bind a staged user without a password to an external directory and then change their user state to active, you can choose to send the user an Activation email that tells them how to register their account. After the user registers their account, creates an account password, and logs in to their JumpCloud User Portal, their password is synced to the directories they\u2019re associated with. <\/li>\n\n\n\n
- Staged user with a password<\/strong>: After you bind a staged user with a password to an external directory and then change their user state to active, you can choose to send the user a Welcome email that tells them to log in to the User Portal. After they log in to their JumpCloud User Portal, their password is synced to the directories they\u2019re associated with.<\/li>\n\n\n\n
- Staged user access in M365<\/strong>: When binding a Staged user to M365, if JumpCloud does not find an existing M365 user to sync, the user will be created in an Active state with a randomized password. This will allow the user account to receive emails, but no login will be possible. However, if JumpCloud finds that the user already exists in M365, JumpCloud will NOT dispatch a password. This means the user may continue to login to their existing M365 account if it already exists. In either case, once the user logs in to JumpCloud\u2019s User Portal for the first time, the password will be synced to M365.<\/li>\n<\/ul>\n\n\n\n
Active User Flow<\/strong><\/h3>\n\n\n\n
- \n
- Active user with a password<\/strong>: After you bind an active user with a password to an external directory, the user receives an email that informs them about that directory to which they\u2019ve been added, and notifies them to synchronize their password by logging into their JumpCloud User Portal. When the user logs in, they see a modal informing them that their password has been updated.<\/li>\n\n\n\n
- Active user without a password<\/strong>: After you bind an active user without a password to an external directory, the user\u2019s password will be synchronized once a password is set by you or the user, and the user logs in to their JumpCloud User Portal.<\/li>\n<\/ul>\n\n\n\n
Additional Resources<\/h4>\n\n\n\n
- \n
- Enroll<\/strong>:\n
- \n
- Provisioning and Deprovisioning Users<\/a><\/li>\n\n\n\n
- Troubleshooting M365 Directory Integrations<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Show me<\/strong>: \n
- \n
- M365 Directory Sync<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
JumpCloud offers direct integration with Microsoft\u00ae 365\u2122 (M365) so you can manage M365 users from the JumpCloud Admin Portal. Their passwords […]<\/p>\n","protected":false},"author":207,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2954,2998],"support_tag":[],"coauthors":[2843],"acf":[],"yoast_head":"\n
Microsoft 365 Directory Integration Overview - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft 365 Directory Integration Overview\" \/>\n<meta property=\"og:description\" content=\"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-18T23:24:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"sashaharrington\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\",\"url\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\",\"name\":\"Microsoft 365 Directory Integration Overview - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:11:47+00:00\",\"dateModified\":\"2024-10-18T23:24:29+00:00\",\"description\":\"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Microsoft 365 Directory Integration Overview\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft 365 Directory Integration Overview - JumpCloud","description":"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","og_locale":"en_US","og_type":"article","og_title":"Microsoft 365 Directory Integration Overview","og_description":"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.","og_url":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","og_site_name":"JumpCloud","article_modified_time":"2024-10-18T23:24:29+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes","Written by":"sashaharrington"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","url":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview","name":"Microsoft 365 Directory Integration Overview - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:11:47+00:00","dateModified":"2024-10-18T23:24:29+00:00","description":"Learn how to integrate with Microsoft 365 so your users passwords are synced with their JumpCloud password the first time they log into their User Portal after they\u2019re associated with M365.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Microsoft 365 Directory Integration Overview"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/207"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246\/revisions"}],"predecessor-version":[{"id":116570,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76246\/revisions\/116570"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=76246"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=76246"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=76246"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=76246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- M365 Directory Sync<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
- Enroll<\/strong>:\n
- Add the new user to JumpCloud.\n