Microsoft Entra ID (formerly, Azure Active Directory) Connector

[#1]

___________________________________________________________________________________________________________________________________

 IMPORTANT: You must purchase IIQ Cloud Governance to enable Cloud Governance features in IdentityIQ and CIEM to enable Cloud Governance features in Identity Security Cloud. For more info see Group Management for Azure Cloud Objects. Contact your SailPoint CSM to request access.

___________________________________________________________________________________________________________________________________

SailPoint Microsoft Entra ID connector offers complete User and Group management of your Azure Active Directory tenant. You can also manage your Azure deployment as hybrid with combination of On Prem Active Directory. Using this connector you can not only manage Users/Member but also you can manage the life cycle of B2B Guest User, B2C consumer users along with the access.

Support Level: SailPoint Delivered

Connectors developed by SailPoint's Engineering team and supported under annual SailPoint support and maintenance. Reach out to SailPoint support for assistance.

Supported Use Cases

• Full Account Aggregation
• Single Account Aggregation
• Delta Account Aggregation
• Full Entitlement Aggregation
• Full Group Aggregation
• Single Group Aggregation
• Delta Group Aggregation
• Create Account Provisioning
• Update Account Provisioning
• Delete Account Provisioning*
• Create Group Provisioning*
• Update Group Provisioning*
• Delete Group Provisioning*
• Enable / Disable Account Provisioning
• Unlock Account Provisioning
• Change Account Password
• Add Entitlement(s)
• Remove Entitlement(s)

*This feature is currently supported only with the IdentityIQ platform

Supported Versions

• Microsoft Azure

Related Documentation

• IdentityNow - Microsoft Entra SaaS Connector (VA-Less Connectivity)
• IdentityNow - (VA Based Connectivity)
• IdentityIQ

Contact Us

SailPoint Support

SailPoint Professional Services

[hugo_medeiros]

Would it be possible to include links under Related Documentation to all available documentation for all current versions of IIQ and Azure connector? Currently it is linking to 8.2 documentation and a customer of our spent hours searching before finding the information he needed for IIQ 8.1 for the Azure connector.

[matt_herrera]

Thanks for the help @hugo_medeiros.  Just for others who are looking for this.  All previous versions and their reference guide.

https://community.sailpoint.com/t5/IdentityIQ-Connectors/Azure-Active-Directory-Connector/ta-p/15823...

[huahmed42]

Dear Experts, can you please tell how to enable Cloud Governance features in IdentityIQ for Azure AD. Please let me know the steps assuming we have the license. 

[AmyL]

Hi @huahmed42

Here's info on the Entra ID connector for the most recent version of IdentityIQ: https://documentation.sailpoint.com/connectors/identityiq/microsoft/entra_id/help/integrating_entra_....

Documentation also includes a section specifically on cloud governance -- see below:

If you want to enable additional cloud governance features for your Entra Cloud Objects (for example, Azure Cloud Object Management , such as, Management Groups, Subscriptions, Resource Groups and Role Assignment or Service Principal Accounts Management), you must have IdentityIQ Cloud Governance license. 

Hope this is helpful! 

[David Norris]

Dead link to the VA-less connector doc.

[AmyL]

Hi @David Norris -- happy to help resolve. There are a lot of links within the documentation, and I'm not sure to which one you're referring. Would you mind posting the dead link so we can figure out what's up? Thanks!  

[David Norris]

Immediately next to: "Microsoft Entra SaaS Connector (VA Less Connectivity)"

[ryan_mccall]

@David Norris the link has been updated.