Azure AD/Office 365 User Sync for WordPress using Microsoft Graph APIs | Setup Azure AD Sync

• Navigate to the User Sync for Azure AD/Office 365 Premium/Enterprise plugin.
• Go to the Manage Application tab and configure the following:

Azure Service Type	Select the Azure AD (Entra ID) option.
Application ID	Paste the Application ID from Azure AD App.
Client Secrets	Paste the Client Secret from the Azure AD App.
Tenant ID	Paste the Directory ID from Azure AD App.
Tenant Name	Enter your Tenant Name.
Redirect URI	Enter the URL of your WordPress site.

• Click the Save button to apply the configuration.

Step 3: Test Connection

• Scroll down to the Test Connection section.
• Enter the Test UPN/ID of the user present in your Active Directory.
• Sync to WordPress (Optional): Click this button to manually synchronize an individual test UPN user to WordPress.
• Enable the toggles below (Optional):
  • Fetch Custom Security Attributes - Enable this toggle to import the user's custom security attributes.
  • Fetch Manager's Attributes - Enable this toggle to pull the user's manager-specific attributes.

• Click the Save button.
• Click the Test Attributes button.

• After a successful test connection, you will be able to view the user's attributes.

Step 4: Active Directory to WordPress Sync

• Scroll down to the Active Directory to WordPress Sync section.
• Configure the following settings:

Group IDs	Enter the Azure AD Group IDs whose users should be synchronized. Note: Separate multiple Group IDs using the pipe (|) character.
User Identifier	Select Username/Email or Object Identifier.
Enable Automatic User Creation/Deletion	Enable this toggle and specify the auto-sync interval (minimum 5 minutes) to automatically create, update, or delete WordPress users based on changes in Azure AD.
Assign Content of Deleted User	Enable this toggle and enter the username to assign posts and content from deleted users.

• Click the Save button to save the configuration.
• Click Start Sync to synchronize users immediately.

Step 5: WordPress to Active Directory Provisioning

• WordPress users can be synchronized to Azure AD using Manual Synchronization or Automatic Synchronization as follows:

Manual Synchronization

• Single User Sync: Search for a user and click the Sync button next to the input field to synchronize that user individually.
• Bulk Sync: Click Sync All Users To Azure AD to synchronize all WordPress users. You can monitor the progress and pause, resume, or cancel the synchronization.

Automatic Synchronization

• Enable the required toggles:
  • Enable Auto User Create in Azure AD: Automatically creates a user in Azure AD when a new user is created in WordPress.
  • Enable Auto User Update in Azure AD: Automatically updates Azure AD when a user's profile is modified in WordPress.
  • Enable Auto User Delete in Azure AD: Automatically deletes the linked Azure AD user when the corresponding WordPress user is deleted.

• Click the Save button.

Step 6: Attribute Mapping

Basic Attribute Mapping

• Go to the Users tab.
• Modify the attribute mapping as required.
• Click the Save button to update the synchronization between Azure AD and WordPress.

Advanced Attribute Mapping

• Scroll down to the Advanced Attributes section.
• Click the Add Attribute button.
• Configure the following column fields:
  • WordPress Attribute Name: Enter the WordPress user attribute.
  • Azure Attribute Name: Enter the corresponding Azure AD user attribute.

• You can configure multiple attributes by clicking the Add Attribute button again.
• Click the Save button.

Step 7: Role / Group Mapping

• Scroll down to the Role/Group Mapping section.
• Enable the Role/Group Mapping toggle.

• Enter the Azure AD Group ID (Object ID of the group) for the WordPress role you want to assign. For example, to assign the Editor role to the Azure AD group with Object ID 6aada18f-5408-46f8-ae09-b1c4fa273f69, enter the Object ID in the Editor field.
• Click the Save button.
• Users synchronized from the mapped Azure AD group will now automatically be assigned the configured WordPress role.

Step 8: Profile Picture Sync

• Scroll down to the Profile Picture Sync section.
• Enable the Profile Picture Sync toggle to keep profile images updated in WordPress based on the configured synchronization schedule.
• Enter the value for the Refresh Interval field.
• Click the Save button.

Step 9: Manager Attributes Sync

• Scroll down to the Manager Attributes Sync section.
• Enable the Manager Sync toggle to synchronize reporting manager details for each user during both Bulk Sync and Delta Sync.

Note: Azure AD does not provide webhook notifications for manager updates. The plugin periodically refreshes manager information at configurable intervals ranging from 30 minutes to 7 days.



• Under the Manager Attribute Refresh (Periodic) section, enable the Periodic Refresh toggle and specify the Refresh Interval in minutes.
• Click the Save button.