{"id":82218,"date":"2023-06-05T13:10:22","date_gmt":"2023-06-05T17:10:22","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=82218"},"modified":"2024-10-18T19:15:32","modified_gmt":"2024-10-18T23:15:32","slug":"m365-sync","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/m365-sync","title":{"rendered":"Microsoft 365 \/ Entra ID Directory Sync"},"content":{"rendered":"\n<p>The Microsoft 365 (M365)\/Entra ID Cloud Directory sync integration allows for secure and persistent connectivity between JumpCloud and M365\/Entra ID. The integration allows you to automatically, in real-time, provision new JumpCloud user accounts into M365\/Entra ID, continuously synchronize specified user attributes from JumpCloud to M365\/Entra ID, manage security groups, and take over management of existing user accounts and security groups in M365\/Entra ID from JumpCloud. In addition, admins can import users from M365\/Entra ID into JumpCloud through the M365\/ Entra ID Directory Sync or import and continuously synchronize user attributes using an Entra ID SCIM integration.<\/p>\n\n\n\n<p><strong>Important Considerations<\/strong><\/p>\n\n\n\n<ul>\n<li>You will need to <a href=\"#reactivating-microsoft-365-sync\">reactivate the sync<\/a> integration if any of the following occur:\n<ul>\n<li>The token has expired<\/li>\n\n\n\n<li>The token has become invalid<\/li>\n\n\n\n<li>The global admin account used to authorize the integration is disabled\/has sign-in blocked<\/li>\n\n\n\n<li>The person who configured the integration has left the organization or has changed roles&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Reactivating an integration does not disconnect users or groups from the M365\/Entra ID integration. It creates a new access token for the integration<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Adding and authorizing an M365\/Entra ID Sync Integration<\/strong><\/h2>\n\n\n\n<p>Creating an integration between JumpCloud and M365\/Entra ID starts with adding the M365\/Entra ID integration in the Cloud Directories page of the Admin Portal. Once added, you authorize M365\/Entra ID&nbsp;Directory synchronization. After you authorize sync, you must validate your password expiration setting in Microsoft.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>Don\u2019t authorize the same M365\/Entra ID domain in multiple M365\/Entra ID directory sync instances. If you do, users that are given access to multiple M356\/Entra ID directory instances that are connected to the same domain could be suspended if you remove access\u00a0from one of the instances. You can avoid this by deactivating sync for all but one M365\/Entra ID directory sync instances for a single domain. Be aware that after you deactivate sync for an M365\/Entra ID directory instance, that sync integration is permanently deleted and cannot be recovered.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>To add and authorize M365 Sync integration in JumpCloud<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>Directory Integrations&nbsp;<\/strong>&gt; <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click (&nbsp;<strong>+<\/strong>&nbsp;).<\/li>\n\n\n\n<li>Select&nbsp;<strong>M365\/Azure AD.&nbsp;<\/strong><\/li>\n\n\n\n<li>Give the directory a unique name. <\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>You\u2019ll receive an error and won\u2019t be able to proceed if:<\/p>\n\n\n\n<ul>\n<li>You use invalid characters.<\/li>\n\n\n\n<li>You don\u2019t specify a unique name for the directory.<\/li>\n\n\n\n<li>The name is more than 255 characters.<\/li>\n\n\n\n<li>The name only contains whitespace.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"6\">\n<li>Click&nbsp;<strong>authorize sync<\/strong>.<\/li>\n\n\n\n<li>JumpCloud opens a session for you to log in to Microsoft Online &#8211; log in with an administrator account.\u00a0<\/li>\n\n\n\n<li>Optionally, choose whether to stay signed in. Click&nbsp;<strong>No<\/strong>&nbsp;or&nbsp;<strong>Yes<\/strong>.&nbsp;<\/li>\n\n\n\n<li>Microsoft shows the items JumpCloud needs permissions to access. Click&nbsp;<strong>Accept<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Validating&nbsp;the Password Expiration Setting in Microsoft<\/strong><\/h3>\n\n\n\n<p>After account synchronization is established between JumpCloud and M365\/Entra ID, perform the following steps to make sure JumpCloud is the authority for password expiration for users in M365\/Entra ID.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To check Microsoft&#8217;s password expiration setting<\/strong><\/h4>\n\n\n\n<ol>\n<li>In the M365 admin center, navigate to\u00a0<strong>Settings<\/strong>\u00a0&gt;\u00a0<strong>Org<\/strong>\u00a0<strong>Settings<\/strong> &gt;\u00a0<strong>Security &amp; privacy<\/strong>.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Password expiration policy<\/strong>.<\/li>\n\n\n\n<li>Ensure that <strong>Set passwords to never expire<\/strong>&nbsp;<strong>(recommended)<\/strong> is selected.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img decoding=\"async\" width=\"1024\" height=\"856\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy-1024x856.jpg\" alt=\"\" class=\"wp-image-103360\" style=\"width:700px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy-1024x856.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy-300x251.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy-768x642.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy.jpg 1077w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"4\">\n<li>Click <strong>Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Importing M365 Users<\/strong><\/h2>\n\n\n\n<p>After you authorize sync with Microsoft, a modal opens with a list of existing active Microsoft user accounts.<\/p>\n\n\n\n<p>You can close this tab to import accounts at a later time, or you can continue importing accounts now.<\/p>\n\n\n\n<p>For more information and instructions for manually importing users, see <a href=\"https:\/\/jumpcloud.com\/support\/sync-users-and-groups-from-jumpcloud-to-m365-azure-ad\">Sync Users and Groups to Microsoft 365 \/ Entra ID<\/a>.&nbsp;<\/p>\n\n\n\n<p>For more information about importing and syncing users from M365\/Entra ID in real-time using a SCIM integration, see <a href=\"https:\/\/jumpcloud.com\/support\/configure-real-time-user-provisioning-from-azure-ad\">Configure Real-time User Provisioning from Entra ID.<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>M365\/Entra ID<\/strong> <strong>Synchronization Configuration and Maintenance<\/strong><\/h2>\n\n\n\n<p>There are a few more steps to complete the M365\/Entra ID Cloud Directory Synchronization Integration setup.&nbsp;<\/p>\n\n\n\n<ul>\n<li><a href=\"#enabling-management-of-security-groups-and-memberships\">Enabling Management of Security Groups and Memberships<\/a><\/li>\n\n\n\n<li><a href=\"#managing-domain(s)\">Managing Domains<\/a><\/li>\n\n\n\n<li><a href=\"#configuring-attribute-mapping-and-settings\">Configuring Attribute Mapping and Settings<\/a><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"enabling-management-of-security-groups-and-memberships\"><strong>Enabling Management of Security Groups and Memberships<\/strong><\/h3>\n\n\n\n<p>Simplify access control using group management from JumpCloud.&nbsp;Create and update group names and membership in M365\/Entra ID from JumpCloud.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To enable security groups and membership management<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click the M365\/Entra ID directory instance in which you want to create and manage the group(s).<\/li>\n\n\n\n<li>Check the box for <strong>Enable management of Security Groups and memberships in M365\/Azure AD.<\/strong><\/li>\n\n\n\n<li>Click <strong>save.<\/strong><\/li>\n\n\n\n<li>From the User Groups tab, select the groups you want to manage.<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To disable security groups and membership management<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click the M365\/Entra ID directory instance in which you want to create and manage the group(s).<\/li>\n\n\n\n<li>Uncheck the box for <strong>Enable management of Security Groups and memberships in M365\/Azure AD.<\/strong><\/li>\n\n\n\n<li>In the confirmation modal, click <strong>continue<\/strong><\/li>\n\n\n\n<li>Click <strong>save<\/strong>. <\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Disabling group management will leave the groups as-is in&nbsp;M365\/Entra ID and stops managing membership.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"managing-domain(s)\"><strong>Managing Domain(s)<\/strong><\/h3>\n\n\n\n<p>Specify one or more domains as part of the integration configuration to have more granular control over which user accounts sync and how the translation rule for the email to User Principal Name (UPN) mapping is applied. There are three (3) possible configurations: no domains, a list of one or more domains but no default, and a list of one or more domains with one of those domains used as a default for the UPN translation rule.&nbsp;Each configuration is described in more detail below.<\/p>\n\n\n\n<ul>\n<li>If no domains are configured, the user\u2019s mapped email (company or alternate) is not checked and sent as is.\u00a0The user syncs as long as their email domain matches one of the verified domains in the M365\/Entra ID instance<\/li>\n\n\n\n<li>If one or more domains is configured and <strong>No default. Only users with matching domains sync <\/strong>is selected, the user\u2019s mapped email default (company or alternate) is checked against the domains listed. Only users with matching email domains are synced<\/li>\n\n\n\n<li>If one or more domains is configured and one of the domains is selected to <strong>Use as default<\/strong>, the user\u2019s mapped email default (company or alternate) is checked against the domains listed:\n<ul>\n<li>If the domain matches one of the domains in the list, the email address is sent as is<\/li>\n\n\n\n<li>If the domain does not match one of the domains in the list, the email value sent as the UPN wll be the username portion of the source email address (Company or Alternate Email) and the default domain<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p>Examples of how domains are used by the integration.<\/p>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n    >\n        <table id=\"wpdtSimpleTable-218\"\n           style=\"border-collapse:collapse;\n                   border-spacing:0px;\"\n           class=\"wpdtSimpleTable wpDataTable\"\n           data-column=\"4\"\n           data-rows=\"10\"\n           data-wpID=\"218\"\n           data-responsive=\"0\"\n           data-has-header=\"1\">\n\n                    <thead>        <tr class=\"wpdt-cell-row \" >\n                            <th class=\"wpdt-cell wpdt-align-center wpdt-bold\"\n                                    data-cell-id=\"A1\"\n                data-col-index=\"0\"\n                data-row-index=\"0\"\n                style=\" width:25%;                padding:10px;\n                \"\n                >\n                                Domains Configuration                <\/th>\n                                            <th class=\"wpdt-cell wpdt-bold wpdt-align-center\"\n                                    data-cell-id=\"B1\"\n                data-col-index=\"1\"\n                data-row-index=\"0\"\n                style=\" width:25%;                padding:10px;\n                \"\n                >\n                                Source email(JumpCloud Company Email)                <\/th>\n                                            <th class=\"wpdt-cell wpdt-bold wpdt-align-center\"\n                                    data-cell-id=\"C1\"\n                data-col-index=\"2\"\n                data-row-index=\"0\"\n                style=\" width:25%;                padding:10px;\n                \"\n                >\n                                Sync results                <\/th>\n                                            <th class=\"wpdt-cell wpdt-bold wpdt-align-center\"\n                                    data-cell-id=\"D1\"\n                data-col-index=\"3\"\n                data-row-index=\"0\"\n                style=\" width:25%;                padding:10px;\n                \"\n                >\n                                Primary Email value sent to Cloud Directory                <\/th>\n                                        <\/tr>\n                    <tbody>        <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold\"\n                                    data-cell-id=\"A2\"\n                data-col-index=\"0\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                No domains                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B2\"\n                data-col-index=\"1\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test1@mydomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C2\"\n                data-col-index=\"2\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Synced                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D2\"\n                data-col-index=\"3\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test1@mydomain.com                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold wpdt-empty-cell \"\n                                    data-cell-id=\"A3\"\n                data-col-index=\"0\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B3\"\n                data-col-index=\"1\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test2@alternatedomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C3\"\n                data-col-index=\"2\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Synced                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D3\"\n                data-col-index=\"3\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test2@alternatedomain.com                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold wpdt-empty-cell \"\n                                    data-cell-id=\"A4\"\n                data-col-index=\"0\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B4\"\n                data-col-index=\"1\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test3@otherdomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C4\"\n                data-col-index=\"2\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Sync failed                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D4\"\n                data-col-index=\"3\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test3@otherdomain.com                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold\"\n                                    data-cell-id=\"A5\"\n                data-col-index=\"0\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Domains list = (mydomain.com, alternatedomain.com )&amp;no default selected                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B5\"\n                data-col-index=\"1\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test1@mydomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C5\"\n                data-col-index=\"2\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Synced                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D5\"\n                data-col-index=\"3\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test1@mydomain.com                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold wpdt-empty-cell \"\n                                    data-cell-id=\"A6\"\n                data-col-index=\"0\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B6\"\n                data-col-index=\"1\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test2@alternatedomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C6\"\n                data-col-index=\"2\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Synced                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D6\"\n                data-col-index=\"3\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test2@alternatedomain.com                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold wpdt-empty-cell \"\n                                    data-cell-id=\"A7\"\n                data-col-index=\"0\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B7\"\n                data-col-index=\"1\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test3@otherdomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C7\"\n                data-col-index=\"2\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                N\/A - user skipped                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D7\"\n                data-col-index=\"3\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                N\/A                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold\"\n                                    data-cell-id=\"A8\"\n                data-col-index=\"0\"\n                data-row-index=\"7\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Domains list = (mydomain.com, alternatedomain.com )&amp;mydomain.com selected to use as default                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B8\"\n                data-col-index=\"1\"\n                data-row-index=\"7\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test1@mydomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C8\"\n                data-col-index=\"2\"\n                data-row-index=\"7\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Synced                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D8\"\n                data-col-index=\"3\"\n                data-row-index=\"7\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test1@mydomain.com                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold wpdt-empty-cell \"\n                                    data-cell-id=\"A9\"\n                data-col-index=\"0\"\n                data-row-index=\"8\"\n                style=\"                padding:10px;\n                \"\n                >\n                                                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B9\"\n                data-col-index=\"1\"\n                data-row-index=\"8\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test2@alternatedomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C9\"\n                data-col-index=\"2\"\n                data-row-index=\"8\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Synced                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D9\"\n                data-col-index=\"3\"\n                data-row-index=\"8\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test2@alternatedomain.com                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-bold wpdt-empty-cell \"\n                                    data-cell-id=\"A10\"\n                data-col-index=\"0\"\n                data-row-index=\"9\"\n                style=\"                padding:10px;\n                \"\n                >\n                                                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"B10\"\n                data-col-index=\"1\"\n                data-row-index=\"9\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test3@otherdomain.com                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"C10\"\n                data-col-index=\"2\"\n                data-row-index=\"9\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Synced                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"D10\"\n                data-col-index=\"3\"\n                data-row-index=\"9\"\n                style=\"                padding:10px;\n                \"\n                >\n                                user.test3@mydomain.com                <\/td>\n                                        <\/tr>\n                    <\/table>\n<\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To add domains<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click the M365\/Entra ID directory instance.<\/li>\n\n\n\n<li>Click <strong>+Add Domain<\/strong>.<\/li>\n\n\n\n<li>Click the dropdown menu.<\/li>\n\n\n\n<li>Select one of the domains from the list.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The list is pulled dynamically from M365\/Entra ID and only includes verified domains. The domain noted with (default), is the domain specified as the default in M365\/Entra ID which is separate from the \u2018Use ad default\u2019 option within the integration configuration in JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"7\">\n<li>Repeat steps 4-6 to add additional domains.<\/li>\n\n\n\n<li>Click the radio button next to one of the domains to use that domain for the UserPrincipalName translation rule.<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To set one of the domains as the default for the integration<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click the M365\/Entra ID directory instance.<\/li>\n\n\n\n<li>Click <strong>Edit Domains<\/strong>.<\/li>\n\n\n\n<li>Click the radio button next to one of the domains to use that domain for the UserPrincipalName translation rule.<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To edit the domains list<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click the M365\/Entra ID directory instance in which you want to create and manage the group(s).<\/li>\n\n\n\n<li>Click <strong>Edit Domains<\/strong><\/li>\n\n\n\n<li>Click the radio button next to one of the domains to use that domain for the UserPrincipalName translation rule<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To change which domain is used as the default for the integration<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click the M365\/Entra ID directory instance.<\/li>\n\n\n\n<li>Click <strong>Edit Domains<\/strong><\/li>\n\n\n\n<li>Click the domain name t and make a new selection<\/li>\n\n\n\n<li>Click Click <strong>+Add Domain<\/strong><\/li>\n\n\n\n<li>Click the dropdown menu<\/li>\n\n\n\n<li>Select one of the domains from the list<\/li>\n\n\n\n<li>Repeat steps 5-8 until all changes have been made<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To remove domains from the list<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click the M365\/Entra ID directory instance in which you want to create and manage the group(s).<\/li>\n\n\n\n<li>Click <strong>Edit Domains<\/strong><\/li>\n\n\n\n<li>Click the trash icon next to the domain you want to remove from the list<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>To change from using a default to not specifying a default domain<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Click the M365\/Entra ID directory instance.<\/li>\n\n\n\n<li>Click <strong>Edit Domains<\/strong><\/li>\n\n\n\n<li>Click the radio button next to <strong>No default. Only users with matching domains sync.<\/strong><\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"configuring-attribute-mappings-and-settings\"><strong>Configuring Attribute Mapping and Settings<\/strong><\/h2>\n\n\n\n<p>You can control which attributes sync from the Attribute mapping and settings. For more information, see\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/sync-user-attributes-with-m365\">Sync User Attributes to M365<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Giving JumpCloud Users Access to M365<\/strong><\/h2>\n\n\n\n<p>After you authorize sync for a M365 directory, complete the configuration, and, optionally, import users, you can specify users to manage by associating JumpCloud users and groups to the M365 directory instance.\u00a0<\/p>\n\n\n\n<p><strong>Considerations<\/strong><\/p>\n\n\n\n<ul>\n<li>M365\/Entra ID group management is only supported for security groups at this time<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"connecting-individual-users-to-an-m365-directory\"><strong>To connect individual users to an M365 directory<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>User Management &gt; Users<\/strong>.<\/li>\n\n\n\n<li>Select the <strong>Directories <\/strong>tab.<\/li>\n\n\n\n<li>Select the M365 directory you want to connect the user to.<\/li>\n\n\n\n<li>Click <strong>save user<\/strong>. <\/li>\n\n\n\n<li>Synchronization is initiated.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>This will cause users to be logged out of all 365 apps.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"sync-behavior\"><strong>Sync Behavior<\/strong><\/h4>\n\n\n\n<ul>\n<li>If the user didn\u2019t previously exist in Microsoft, and their email matches the M365 directory domain, a new, active user account is provisioned to Microsoft<\/li>\n\n\n\n<li>If the user resets their JumpCloud password, it\u2019s synced to Microsoft. When set, existing Microsoft sessions expire and the user must log in again<\/li>\n<\/ul>\n\n\n\n<p>After you connect a user to an M365 directory, the flow differs slightly for new and active users:<\/p>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>Active user flow<\/strong><\/h5>\n\n\n\n<ul>\n<li>An active user is a user in an \u201cactive\u201d user state, has a password, and that password status is \u2018active\u2019. After an admin binds an active user to an external directory, the user receives an email that tells them the directory they\u2019ve been added to and to synchronize their password by logging into their User Portal<\/li>\n<\/ul>\n\n\n\n<h5 class=\"wp-block-heading\"><strong>New user flow<\/strong><\/h5>\n\n\n\n<ul>\n<li>A new user is a user in an \u201cactive\u201d user state with a password status of \u201cpassword pending.\u201d After an admin binds a new user without a password to an external directory, the user receives a Welcome to JumpCloud (activation) email that tells them how to register their account<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Connecting User Groups to an M365 Directory<\/strong><\/h3>\n\n\n\n<p>To connect user groups to an M365 directory as security groups:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>User Management &gt; User Groups<\/strong>.<\/li>\n\n\n\n<li>Select a group to view its details.<\/li>\n\n\n\n<li>Select the <strong>Directories <\/strong>tab.<\/li>\n\n\n\n<li>Select the M365 directory you want to connect the group to.<\/li>\n\n\n\n<li>Click <strong>save group<\/strong>. Synchronization is initiated.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>This will cause users to be logged out of all 365 apps.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Sync Behavior<\/strong><\/h4>\n\n\n\n<ul>\n<li>See the<a href=\"#sync-behavior\"> Connecting Individual Users to an M365 Directory Sync Behavior<\/a> section above for details about how members of the user group sync<\/li>\n\n\n\n<li>If the <strong>Enable management of Security Groups and memberships in M365\/Azure AD<\/strong> option is checked, groups will sync as follows:\n<ul>\n<li>If a group with the same name exists in M365\/Entra ID, JumpCloud takes over the group<\/li>\n\n\n\n<li>If a group with the same name does not exist in M365\/Entra ID, a group is created in M365\/Entra ID<\/li>\n\n\n\n<li>If there is more than one group with the same name in M365\/Entra ID, a third group is created in M365\/Entra ID<\/li>\n\n\n\n<li>At this time, M365\/Entra ID group management is only supported for security groups<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>M365\/Entra ID Synchronization Integration Maintenance<\/strong><\/h2>\n\n\n\n<p>After synchronization with a M365 directory, you can perform these maintenance tasks:<\/p>\n\n\n\n<ul>\n<li><a href=\"#renaming-a-m365-directory\">Rename a M365 Directory<\/a><\/li>\n\n\n\n<li><a href=\"#reactivating-m365-sync\">Reactivate a M365 Sync<\/a><\/li>\n\n\n\n<li><a href=\"#deactivating-m365-sync\">Deactivate a M365 Sync<\/a><\/li>\n\n\n\n<li><a href=\"#disabling-m365-aad-accounts\">Disable M365 Accounts from JumpCloud<\/a><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"renaming-a-m365-directory\"><strong>Renaming a M365 Directory<\/strong><\/h3>\n\n\n\n<p>You can rename a M365 directory at any time in the Admin Portal.\u00a0<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"rename-m365-directory\"><strong>To rename a M365\u00a0directory<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DIRECTORY INTEGRATIONS<\/strong>&nbsp;&gt;&nbsp;<strong>Cloud Directories<\/strong>.&nbsp;<\/li>\n\n\n\n<li>Select the M365 directory you want to rename.<\/li>\n\n\n\n<li>Click the Pencil icon to edit the directory name.<\/li>\n\n\n\n<li>Enter a new unique name for the directory.<\/li>\n\n\n\n<li>Click outside of the name field to save the new name.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"reactivating-m365-sync\"><strong>Reactivating M365 Sync<\/strong><\/h3>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>If the integration has stopped syncing, check the following.&nbsp; If any of these situations occur, you will need to reactivate the integration. Reactivating the integration does not disconnect users or groups from the integration. You will need to reactivate the sync integration if any of the following occur:<\/p>\n\n\n\n<ul>\n<li>The token has expired<\/li>\n\n\n\n<li>The token has become invalid<\/li>\n\n\n\n<li>The global admin account used to authorize the integration is disabled\/has sign-in blocked<\/li>\n\n\n\n<li>The person who configured the integration has left the organization or has changed roles<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-to-reactivate-sync-for-a-m365-domain\"><strong>To reactivate sync for a\u00a0M365 domain<\/strong><\/h4>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DIRECTORY INTEGRATIONS<\/strong>&nbsp;&gt;&nbsp;<strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Select the M365 directory where you want to reactivate sync.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Reactivate Sync<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img decoding=\"async\" width=\"1968\" height=\"662\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/06\/M365-Reactivate.jpg\" alt=\"\" class=\"wp-image-90817\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Reactivate.jpg 1968w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Reactivate-300x101.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Reactivate-1024x344.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Reactivate-768x258.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Reactivate-1536x517.jpg 1536w\" sizes=\"(max-width: 1968px) 100vw, 1968px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Follow Microsoft&#8217;s prompts to authorize JumpCloud.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"deactivating-m365-sync\"><strong>Deactivating M365 Sync<\/strong><\/h3>\n\n\n\n<p>If you no longer want to sync a\u00a0M365 directory with JumpCloud, you can deactivate sync for it. Deactivation breaks sync for a M365 directory and unbinds all connected users and groups. Only deactivate sync for an M365 directory if you no longer need it to sync with JumpCloud.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>After you deactivate sync for an M365 directory:<\/p>\n\n\n\n<ul id=\"block-24612265-860a-4a52-9b55-ca7c2924ad21\">\n<li>The following information is\u00a0<em>permanently<\/em>\u00a0deleted for the M365 directory, and isn&#8217;t recovered by reactivating sync:\n<ul>\n<li>Name<\/li>\n\n\n\n<li>Configuration<\/li>\n\n\n\n<li>Connections to users, groups, and resources<\/li>\n\n\n\n<li>This specific instance of M365\/Entra ID in JumpCloud<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Sync ceases between JumpCloud and the M365 directory.\u00a0<\/li>\n\n\n\n<li>User attribute changes are no longer propagated from JumpCloud to M365<\/li>\n\n\n\n<li>All users are removed \/ unbound from the M365 directory in JumpCloud.<\/li>\n\n\n\n<li>Users will not be effected and will retain&nbsp;access to their respective Microsoft applications.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>To deactivate sync for an\u00a0M365<\/strong> <strong>domain<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DIRECTORY INTEGRATIONS<\/strong>&nbsp;&gt;&nbsp;<strong>Cloud Directories<\/strong>.<\/li>\n\n\n\n<li>Select the M365 directory where you want to deactivate sync.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Deactivate Sync<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img decoding=\"async\" width=\"1968\" height=\"662\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/06\/M365-Deactivate.jpg\" alt=\"\" class=\"wp-image-90820\" style=\"width:748px;height:251px\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Deactivate.jpg 1968w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Deactivate-300x101.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Deactivate-1024x344.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Deactivate-768x258.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Deactivate-1536x517.jpg 1536w\" sizes=\"(max-width: 1968px) 100vw, 1968px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Click&nbsp;<strong>Deactivate Sync<\/strong>&nbsp;again. Users or groups that are bound to this directory are unbound from the directory and the JumpCloud instance is removed.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" width=\"656\" height=\"362\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/06\/M365-Deactivation-Confirmation.jpg\" alt=\"\" class=\"wp-image-90819\" style=\"width:406px;height:224px\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Deactivation-Confirmation.jpg 656w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/M365-Deactivation-Confirmation-300x166.jpg 300w\" sizes=\"(max-width: 656px) 100vw, 656px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"disabling-m365-aad-accounts\"><strong>Disabling M365\/Entra ID Accounts from JumpCloud<\/strong><\/h3>\n\n\n\n<p>For details about disabling accounts in M365\/Entra ID from JumpCloud, see <a href=\"https:\/\/jumpcloud.com\/support\/sync-users-and-groups-from-jumpcloud-to-m365-azure-ad\">Sync Users and Groups to Microsoft 365\/Entra ID<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Microsoft 365 (M365)\/Entra ID Cloud Directory sync integration allows for secure and persistent connectivity between JumpCloud and M365\/Entra ID. [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2954,2998],"support_tag":[],"coauthors":[2839,2842],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Microsoft 365 \/ Entra ID Directory Sync - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to authorize a Microsoft 365 Directory sync with JumpCloud in the Admin Portal, as well as maintain the synchronization.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/m365-sync\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft 365 \/ Entra ID Directory Sync\" \/>\n<meta property=\"og:description\" content=\"Learn how to authorize a Microsoft 365 Directory sync with JumpCloud in the Admin Portal, as well as maintain the synchronization.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/m365-sync\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-18T23:15:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy-1024x856.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"12 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski, pamkellman\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-sync\",\"url\":\"https:\/\/jumpcloud.com\/support\/m365-sync\",\"name\":\"Microsoft 365 \/ Entra ID Directory Sync - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-sync#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-sync#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy-1024x856.jpg\",\"datePublished\":\"2023-06-05T17:10:22+00:00\",\"dateModified\":\"2024-10-18T23:15:32+00:00\",\"description\":\"Learn how to authorize a Microsoft 365 Directory sync with JumpCloud in the Admin Portal, as well as maintain the synchronization.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-sync#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/m365-sync\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-sync#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy.jpg\",\"width\":1077,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/m365-sync#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Microsoft 365 \/ Entra ID Directory Sync\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Microsoft 365 \/ Entra ID Directory Sync - JumpCloud","description":"Learn how to authorize a Microsoft 365 Directory sync with JumpCloud in the Admin Portal, as well as maintain the synchronization.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/m365-sync","og_locale":"en_US","og_type":"article","og_title":"Microsoft 365 \/ Entra ID Directory Sync","og_description":"Learn how to authorize a Microsoft 365 Directory sync with JumpCloud in the Admin Portal, as well as maintain the synchronization.","og_url":"https:\/\/jumpcloud.com\/support\/m365-sync","og_site_name":"JumpCloud","article_modified_time":"2024-10-18T23:15:32+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy-1024x856.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"12 minutes","Written by":"joyjaswinski, pamkellman"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/m365-sync","url":"https:\/\/jumpcloud.com\/support\/m365-sync","name":"Microsoft 365 \/ Entra ID Directory Sync - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/m365-sync#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/m365-sync#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy-1024x856.jpg","datePublished":"2023-06-05T17:10:22+00:00","dateModified":"2024-10-18T23:15:32+00:00","description":"Learn how to authorize a Microsoft 365 Directory sync with JumpCloud in the Admin Portal, as well as maintain the synchronization.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/m365-sync#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/m365-sync"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/m365-sync#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/MS-password-expiration-policy.jpg","width":1077,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/m365-sync#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Microsoft 365 \/ Entra ID Directory Sync"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/82218"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/82218\/revisions"}],"predecessor-version":[{"id":116564,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/82218\/revisions\/116564"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=82218"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=82218"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=82218"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=82218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}