https://graph.microsoft.com/v1.0/$metadata#applications/$entity

Create a new group. It can be a Microsoft 365 group, dynamic group, or security group.

Create a subscription to receive notifications when changes occur in the specified object.

https://graph.microsoft.com/v1.0/$metadata#subscriptions/$entity

https://graph.microsoft.com/v1.0/$metadata#users/$entity

Product Marketing Manager

Delete all webhooks that point to a flow in this instance.

Read properties of an application object.

https://graph.microsoft.com/v1.0/$metadata#groups/$entity

Read properties of a subscription object.

Read properties and relationships of the User object.

Retail Manager

Retrieve the list of applications in the organization.

https://graph.microsoft.com/v1.0/$metadata#applications

Track changes in an object and its children over time.

https://graph.microsoft.com/v1.0/$metadata#users

https://graph.microsoft.com/v1.0/$metadata#groups

Get the direct members of this group from the members navigation property.

https://graph.microsoft.com/v1.0/$metadata#directoryObjects

https://graph.microsoft.com/v1.0/$metadata#subscriptions

Send raw HTTP request to Microsoft Entra ID.

Remove a member from a Microsoft 365 group or a security group through the members navigation property.

Updates a subscription expiration time for renewal and/or updates the notificationUrl for delivery.

Create a new application if it doesn't exist, or update the properties of an existing application.

Create a new group if it doesn't exist, or update the properties of an existing group.

This authentication method may be used when an App requires granting admin consent to API permissions, in addition to authorizing the integration with the App's configured client credentials.

The Microsoft Azure Active Directory component authenticates requests through the [Microsoft Graph API](https://docs.microsoft.com/en-us/graph/use-the-api).

### Creating an App Registration

To configure OAuth 2.0 you must first create an App through Active Directory in the [Microsoft Entra Admin Center](https://entra.microsoft.com/#home) or [Microsoft Azure Portal](https://portal.azure.com/#home).

1. Navigate to **App Registrations**
2. When creating the application you will be prompted to select **Supported account types**.
3. Select **Accounts in any organizational directory (Any Azure AD directory - Multitenant)**.
4. Navigate to **Redirect URI** and add the **Web** platform. Now enter the redirect URI as `https://oauth2.prismatic.io/callback` for US based integrations.
    1. For integrations outside the US refer to this [guide](https://prismatic.io/docs/connections/#creating-an-oauth-20-app-in-a-third-party-service) to find your region’s Callback URL.
5. Select **Register** to complete.
6. In the App, navigate to **Certificates & Secrets** and select **New client secret**. Copy/save the **Value** for use in the connection configuration of your integration (the value will not be shown again).
7. Next, navigate to the **Overview** section and copy the **Application (client) ID**
8. Navigate to the **API Permissions** section to assign the proper permissions for the integration. Select **Add Permission**, select all permissions that are required for your desired integration
and save these values for later. A full list of scopes can be found on
the [Microsoft Graph API documentation](https://learn.microsoft.com/en-us/graph/permissions-reference)
    1. Recommended scopes for Active Directory can be found in Microsoft Graph > Delegated permissions:
        1. `Group.ReadWrite.All GroupMember.ReadWrite.All Application.ReadWrite.All User.Read.All offline_access`

### Configuring the Integration

Supply the following values to the **OAuth 2.0 Authorization Code** connection in your integration within Prismatic:

- **Client ID** enter the **Application (client) ID**
- **Client Secret** enter the **Value** provided (Do not use **Secret ID**)
- Provide the assigned API permissions as **Scopes** you assigned to your App. The default value will be set to the following:
    - Default example: `Group.ReadWrite.All GroupMember.ReadWrite.All Application.ReadWrite.All User.Read.All offline_access`
- If you didn't select Multitenant when creating the App, you will need to replace the **Authorize URL** and **Token URL** with ones specific to your tenant.


Microsoft Entra ID (Formerly Azure Active Directory) is a cloud-based identity and access management service from Microsoft that helps employees sign in and access resources. Use the Microsoft Entra ID component to manage your users, groups, and applications.

Microsoft Entra ID (Formerly Azure Active Directory) is a cloud-based identity and access management service from Microsoft that helps employees sign in and access resources.

Use the Microsoft Entra ID component to manage your users, groups, and applications.

#### API Documentation:

The component was built using the [Microsoft Graph REST API v1.0](https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0&preserve-view=true)


Get notified to this flow when a group changes.

Get notified to this flow when a user changes.

Receive and validate webhook requests from Microsoft Entra ID for webhooks you configure.

Action Name	Action Description
Create User	Create a new user.
Delete User	Deletes a User.
Get User	Read properties and relationships of the User object.
List Users	Retrieve a list of user objects.
Update User	Update the properties of a User object.
Create Group	Create a new group. It can be a Microsoft 365 group, dynamic group, or security group.
Delete Group	Delete group object.
Get Group	Read properties of a group object.
List Group	List group objects and their properties.
List Group Members	Get the direct members of this group from the members navigation property.
Add Member to Group	Add a member to a group.
Remove Member of Group	Remove a member from a Microsoft 365 group or a security group through the members navigation property.
Upsert Group	Create a new group if it doesn't exist, or update the properties of an existing group.
Create Application	Creates (registers) a new application.
Delete Application	Delete application object.
List Applications	Retrieve the list of applications in the organization.
Upsert Application	Create a new application if it doesn't exist, or update the properties of an existing application.
Get Application	Read properties of an application object.
List Changes	Track changes in an object and its children over time.
Create Subscription	Create a subscription to receive notifications when changes occur in the specified object.
Delete Subscription	Deletes a subscription object.
Get Subscription	Read properties of a subscription object.
List Subscriptions	Lists active subscriptions.
Update Subscription	Updates a subscription expiration time for renewal and/or updates the notificationUrl for delivery.
Delete Instanced Subscriptions	Delete all webhooks that point to a flow in this instance.
Raw Request	Send raw HTTP request to Microsoft Entra ID.

Trigger Name	Trigger Description
Webhook	Receive and validate webhook requests from Microsoft Entra ID for webhooks you configure.
User Trigger	Get notified to this flow when a user changes.
Group Trigger	Get notified to this flow when a group changes.

Microsoft Entra ID Connector

Integrate with customers’ other SaaS apps, fast

About the Microsoft Entra ID Connector

Actions

Triggers

Ready to get started?