Breadcrumbs

Azure: Set up FileCloud Integration for SSO Group/User Import

To configure FileCloud/Azure integration in Azure for SSO group/user import:

  1. Log into portal.azure.com, and go to Microsoft Entra ID (https://entra.microsoft.com/) .

    image-20251111-155352.png

  2. In the left navigation pane, go to Manage > App registrations, and at the top of the page, click New registration.

    image-20251111-155359.png

  3. Enter a name for the application, and then click Register.

    image-20251111-155410.png

  4. In the left navigation pane, go to Manage > API permissions, and then click Add a permission.

    image-20251111-155417.png

  5. In the Request API permissions box, click Microsoft Graph.

    image-20251111-155424.png


    In the Request API Permissions box, you are prompted to choose a type of permission.

  6. First, select Delegated permissions, and request the permissions specified below. 

    image-20251111-155433.png


    Delegated permissions to request:

    • Directory.Read.All 

    • Group.Read.All 

    • GroupMember.Read.All 

    • User.Read 

    • User.Read.All 

  7. Search for the permission type in the Select permissions search bar to find it more quickly, and then check the permissions.

  8. When you are done checking all of the above permissions, click Add permissions.

    image-20251117-163336.png


    Now, in the Request API permissions box, choose Application permissions, and request the permissions specified below:

    image-20251111-155455.png


    Application permissions to request:

    • Directory.Read.All

    • Group.Read.All

    • GroupMember.Read.All

    • User.Read.All

    • User.ReadBasic.All

  9. Repeat steps 7 and 8 to request the Application permissions.

    Initially, most of the permissions show that permission has not been granted. 

  10. Above the list, click Grant admin consent for [Tenant name], and when prompted, click Yes.
    Note: If you are not a global admin, you must ask your global admin to grant the API permissions for you.

    image-20251111-155505.png


    When all of your permissions have been granted, your list of permissions should appear similar to:

    image-20251111-155518.png

  11. Now, in the left navigation pane, go to Manage > Certificates & secrets, and click the Client secrets tab.

  12. Click New client secret.

    image-20251111-155527.png

  13. In the Add a client secret box, enter a description for the client secret, and choose an expiration date, then click Add.

    image-20251111-155535.png

  14. Click the copy icon next to Value and save it. You will use it to fill in the Client Secret field in FileCloud.

    image-20251111-155542.png

  15. In the left navigation pane, click Overview.

  16. Hover over Directory (tenant) ID and click the copy icon. Save the Directory (tenant) ID. You will use it to fill in the Tenant ID field in FileCloud.

  17. Hover over Application (client) ID and click the copy icon. Save the Application (client) ID. You will use it to fill in the Client ID field in FileCloud

    image-20251111-155550.png

To enter the integration values into the FileCloud side, see SSO API: Configure Import of SSO Groups and Users.