Setup Drupal Azure AD (Microsoft Entra ID) Synchronization

Azure (Microsoft Entra ID) User Provisioning integration with Drupal streamlines user management and ensures up-to-date user information within the system. This step-by-step guide will assist you in configuring user provisioning/sync from the Drupal site to the Azure application, allowing administrators to easily provision users and manage user data with manual, automatic, or scheduler-based provisioning using the Drupal Azure User Sync module. This module is compatible with Drupal 7, Drupal 8, Drupal 9, and Drupal 10.

The module also supports a two-way sync between Drupal and Azure AD. You can reach out to us at drupalsupport@xecurify.com for one-on-one assistance from a Drupal developer.

Installation Steps:

Setup Drupal:

• After installing the module on the Drupal site, in the Administration menu, navigate to Configuration → People → Azure AD Sync (admin/config/people/azure_ad/overview)
• Have a glance at what the module does and click on the Let’s Configure the module button.

• In STEP 1, select how you would like to perform the Sync. For Drupal to Azure Sync, click on the first (left) GIF.

Setup Azure AD:

• Sign in to the Azure portal.
• Click on the Azure Active Directory from the Azure services.

• From the left navigation panel, click on the App registrations service, and then click on the New Registration button.

• On the Register an application page, please enter the information based on the instructions mentioned below:
• Name: Display the name of the application.
• Supported account types: Select one of the listed options as per requirement.
• Click on the Register button.

Add API Permissions to your Azure AD Application:

• Navigate to API Permissions from the left navigation panel and click on the Add a Permission button.

• Select Microsoft Graph under the Microsoft APIs tab and select Application Permissions.
• In the Select Permission search bar, search for the user.

• Under User, select User.ReadWrite.All permission, click on the Add permissions button.

• Click on Grant admin consent for Default Directory and click on the Yes button to grant admin consent confirmation.

Integrating Drupal with Azure AD:

• In STEP 2, configure the below-mentioned values from the Azure AD into Drupal.
• Tenant ID:
• From the Overview section of the Azure AD Application, copy the Directory (Tenant) ID value.

• Paste the copied Tenant ID into Drupal’s Tenant ID text field.
• Application (Client) ID:
• From the Overview section of the Azure AD Application, copy the Application (client) ID value.

• Paste the copied Client ID in the Drupal’s Application (Client) ID text field.
• Client Secret:
• From the left navigation panel, click on the Certificates & secrets menu and click on the New Client Secret button.
• Add a description for the secret, select the expiry of the secret, and click on the Add button.

• Copy the Secret Value.

• Paste the copied Secret value in Drupal’s Client Secret text field.
• Tenant Name/Primary Domain:
• In the same window, hover on your profile (top right corner) and note down the Domain mentioned in the pop-up box.

• Paste the noted Domain value in Drupal’s Tenant Name/Primary Domain text field.
• Test UPN/ID:
• Navigate to the Azure AD and select the Users menu from the left navigation panel.
• Copy the user’s User Principal Name to test out the integration of Drupal and Azure AD.
• Paste the copied User Principal Name in Drupal’s Test UPN/ID text field.
• Once done with all the Configurations, click on the Save and Test Configuration button.

• If the Test Configuration is successful, the module gives a success message like:

• To check the attributes received from Azure AD, click on the link in the success message.
• Alternatively, if there is an error in the integration of Azure AD with Drupal, then check the cause of the error by following the link in the error message or scrolling down to the Test Configuration Result section.

• Once successful integration, click on the Next button.

Provisioning / Synchronization

• In STEP 3, choose the method to provision the user.

That’s it!! you have successfully provisioned the users with Azure ad (Microsoft Entra ID).

If the Provision was not successful, please contact us at drupalsupport@xecurify.com. Please send the screenshot of the error window, and we will assist you in resolving the issue and guiding you through the setup.