User Sync Settings (Active Directory Integration)

The User Sync Settings Queue in Compliance Manager streamlines user data synchronization with Microsoft Azure Active Directory, improving efficiency and reliability. This update introduces a queue-based system that optimizes performance for handling large-scale user updates while providing real-time status tracking through a detailed sync log.

Follow the steps below to setup and view the User Sync Settings and queue:

1. Navigate to the Admin My Organization and select User Sync settings from the left side menu. The User Sync Settings screen will be displayed.
2. The User Sync Settings queue, displays the synchronization time, status, number of synchronized users, and any errors. You can click on a log entry to view the synced users, and any errors that may have occurred.
   Note: Your Administrators and designated IT Managers, have access to provisioning settings in Compliance Manager, allowing them to configure, manage, and monitor user synchronization between Compliance Manager and Microsoft Entra. They can update attribute mappings, manage sync schedules, and troubleshoot provisioning issues.
3. Navigate through each section below, and follow the steps to synchronize User Sync Settings with Microsoft Azure Active Directory:
   1. Enterprise Application Creation
   2. Admin Credentials 
   3. Attribute Mappings
   4. Add Users

Enterprise Application Creation

Follow these steps to start working with Enterprise Application Creation:

1. Log in to the Microsoft Entra Admin Center.
2. Navigate to the left side menu and select Enterprise Applications under the Applications tab. The Enterprise Applications window will be displayed.
3. Click on New Application. The Browse Microsoft Entra Gallery window will be displayed.
4. Click Create Your Own Application and enter the name of new application.
5. Click Save. The created application will be listed in the Enterprise Applications page.

Admin Credentials

In the Microsoft Entra Admin Center, Admin Credentials are the authentication details of an administrator with permissions to manage identity settings and configurations. These credentials enable provisioning, synchronization, and access management across Microsoft Entra ID and connected applications.

Follow these steps to set Admin Credentials:

1. Select Admin Credentials on the Provisioning page to set up a Compliance Manager instance.
2. Log in to the Compliance Manager and navigate to Admin My Organization User Sync settings from the left side menu. The User Sync Settings screen will be displayed.
3. Enable Active Directory to synchronize user data with Microsoft Entra.
4. Copy the Secret Token and paste it into the Secret Token field on the Microsoft Entra Provisioning page.
5. Enter the Tenant URL for Compliance Manager, followed by /scim/v2.
   Example Tenant URL: https://[yourdomain].compliancemanager.healthicity.com/scim/v2
   Note: In the example above, you would replace '[yourdomain]' with your company's unique Compliance Manager domain. Please contact Healthicity Support if you have additional questions about your unique domain.
6. Click Test Connection to start the backend process. A confirmation message will appear once the connection is successful.
7. Click Save to apply the changes.

Attribute Mappings

Attribute Mappings define which attributes are transferred, how they are transformed, and whether they are required or optional during synchronization, ensuring data consistency and accuracy across integrated applications in a new organization.

Follow these steps to add the desired attributes.

1. Click on the application you created in the Enterprise Applications window. The Application Overview page will then be displayed.
2. Navigate to the left menu of the Application Overview page and click Provisioning to automate user and group synchronization between Microsoft Entra ID and external applications. The Application Preview page will then be displayed.
3. Select Provisioning. The Application Provisioning page will be displayed.
4. Select Mappings and choose Provision Microsoft Entra ID Users to configure user attribute synchronization. The Attribute Mapping page will be displayed.
5. Some fields and options are preselected by default based on the application type. If Target Object Actions is not selected, check the Create, Update, and Delete checkboxes.
6. Go to the Attribute Mappings section, click Add New Mapping to open the Edit Attribute page for configuration.
7. In the Edit Attributes page, you can define the following details:
   • Mapping Type - Specifies whether the mapping is direct, constant, or expression-based. Please use the Direct option for this setup.
   • Source Attributes - Defines the attribute from the source system to be mapped to Compliance Manager.
   • Default Value if Null (Optional) - Sets a default value if the source attribute is empty.
   • Target Attributes - Specifies the destination attribute in the target system (Compliance Manager.
   • Match Object Using This Attribute - Determines which attribute is used for object matching.
   • Matching Procedure - Defines the logic for matching source and target objects.
   • Apply This Mapping - Controls when the mapping is applied (e.g., always, only on object creation).
8. Click OK to add the attribute. The added attribute will appear on the Attribute Mapping page.
9. You can also create the following attributes by using the same steps above. The following attributes will be synced from Active Directory to Compliance Manager:
   • Email
   • First Name
   • Last Name
   • Active/Inactive
   • Job Title
   • Department
   • Manager
   • Employee Number
10. Click OK to save the attribute details. The user can also Edit or Delete created attributes if required.
11. Click Save, and a confirmation message will be displayed. Click Yes to apply all changes.
    Note: The user can create any of these attributes and skip those that are not needed.

Add Users

Adding users in Microsoft Entra under Users and Groups allows managing user accounts, roles, and access permissions.

Follow these steps to add new users:

1. Select Users and Groups from the left panel of the screen. The Users and Groups page will be displayed.
2. Choose Add User/Group to add a new user account in Microsoft Entra. An Add Assignment page will be displayed.
3. Click on the user type. The Users and Groups page will be displayed.
4. Navigate to the desired user name and select the user checkbox.
5. Click Select to add the selected user to the Users list. You can also select multiple users if required.
6. Click Overview from the left panel and select Start Provisioning to initiate the user synchronization process. A confirmation message will be displayed once the provisioning is started.
   Note: The user can also navigate to the Provisioning page and enable the functionality.
7. Users can view the added user logs on the Compliance Manager User Sync Settings page.

© Healthicity, LLC