Microsoft Entra ID (formerly, Azure Active Directory) Connector

4 Kudos

___________________________________________________________________________________________________________________________________

IMPORTANT: You must purchase IIQ Cloud Governance to enable Cloud Governance features in IdentityIQ and CIEM to enable Cloud Governance features in Identity Security Cloud. For more info see Group Management for Azure Cloud Objects. Contact your SailPoint CSM to request access.

___________________________________________________________________________________________________________________________________

SailPoint Microsoft Entra ID connector offers complete User and Group management of your Azure Active Directory tenant. You can also manage your Azure deployment as hybrid with combination of On Prem Active Directory. Using this connector you can not only manage Users/Member but also you can manage the life cycle of B2B Guest User, B2C consumer users along with the access.

Support Level: SailPoint Delivered

Connectors developed by SailPoint's Engineering team and supported under annual SailPoint support and maintenance. Reach out to SailPoint support for assistance.

Supported Use Cases

Full Account Aggregation
Single Account Aggregation
Delta Account Aggregation
Full Entitlement Aggregation
Full Group Aggregation
Single Group Aggregation
Delta Group Aggregation
Create Account Provisioning
Update Account Provisioning
Delete Account Provisioning*
Create Group Provisioning*
Update Group Provisioning*
Delete Group Provisioning*
Enable / Disable Account Provisioning
Unlock Account Provisioning
Change Account Password
Add Entitlement(s)
Remove Entitlement(s)

*This feature is currently supported only with the IdentityIQ platform

Supported Versions

Microsoft Azure

Contact Us

SailPoint Support

SailPoint Professional Services

hugo_medeiros · ‎Oct 26, 2021

Would it be possible to include links under Related Documentation to all available documentation for all current versions of IIQ and Azure connector? Currently it is linking to 8.2 documentation and a customer of our spent hours searching before finding the information he needed for IIQ 8.1 for the Azure connector.

matt_herrera · ‎Jan 06, 2022

Thanks for the help @hugo_medeiros. Just for others who are looking for this. All previous versions and their reference guide.

https://community.sailpoint.com/t5/IdentityIQ-Connectors/Azure-Active-Directory-Connector/ta-p/15823...

huahmed42 · ‎Feb 06, 2025

Dear Experts, can you please tell how to enable Cloud Governance features in IdentityIQ for Azure AD. Please let me know the steps assuming we have the license.

AmyL · ‎Feb 06, 2025

Hi @huahmed42

Here's info on the Entra ID connector for the most recent version of IdentityIQ: https://documentation.sailpoint.com/connectors/identityiq/microsoft/entra_id/help/integrating_entra_....

Documentation also includes a section specifically on cloud governance -- see below:

If you want to enable additional cloud governance features for your Entra Cloud Objects (for example, Azure Cloud Object Management , such as, Management Groups, Subscriptions, Resource Groups and Role Assignment or Service Principal Accounts Management), you must have IdentityIQ Cloud Governance license.

Hope this is helpful!

IIQUserOnCompass

Dead link to the VA-less connector doc.

AmyL

Hi @IIQUserOnCompass -- happy to help resolve. There are a lot of links within the documentation, and I'm not sure to which one you're referring. Would you mind posting the dead link so we can figure out what's up? Thanks!

IIQUserOnCompass

Immediately next to: "Microsoft Entra SaaS Connector (VA Less Connectivity)"

ryan_mccall

@IIQUserOnCompass the link has been updated.

Microsoft Entra ID (formerly, Azure Active Directory) Connector