AiStrike Documentation
AiStrike Documentation
Breadcrumbs

Microsoft Entra

This guide describes how to create an Azure app registration for Microsoft Entra ID (formerly Azure AD) so AiStrike can collect user identities and HR profile attributes.

Prerequisites

  • An Azure / Entra administrator who can create app registrations and grant admin consent (Global Administrator or Application Administrator).

1. Create an app registration

  1. Sign in to the Azure Portal.

  2. Go to Microsoft Entra ID → App registrations.

  3. Click New registration.

  4. Enter a name (for example, AiStrike-Entra).

  5. Under Supported account types, select Accounts in this organizational directory only (Single tenant).

  6. Click Register.

  7. On the Overview page, copy:

    • Application (client) ID — used in AiStrike as Client Id

    • Directory (tenant) ID — used in AiStrike as Tenant Id

2. Assign Microsoft Graph permissions

These are application permissions. Admin consent is required.

  1. Open the app registration.

  2. Go to API permissions → Add a permission.

  3. Select Microsoft Graph → Application permissions.

  4. Add the following:

Permission

Required

Purpose

User.Read.All or Directory.Read.All

Yes

Read user profiles

AuditLog.Read.All

No

Read last sign-in activity

User-LifeCycleInfo.Read.All

No

Read employee hire and leave dates

  1. Click Add permissions.

  1. Still on API permissions, click Grant admin consent for <Tenant Name>.

  2. Confirm Yes.

  3. Status should show Granted for <Tenant Name> for each permission.

4. Create a client secret

  1. Go to Certificates & secrets → New client secret.

  2. Enter a description (for example, AiStrike) and choose an expiration period.

  3. Click Add.

  4. Copy the Value immediately. It is shown only once.

This value is used in AiStrike as Client Secret.

5. Connector configuration

Field

Description

Configuration Name

Friendly name, e.g. Microsoft Entra

Client Id

Application (client) ID from Step 1

Client Secret

Secret value from Step 4

Tenant Id

Directory (tenant) ID from Step 1

Scope

Optional. Leave the default https://graph.microsoft.com/.default unless change is required.

Enable Daily Identity Sync

Optional. Enable to sync identities on a daily schedule

HR Data Correlation Field

Optional. Entra attribute used to match HR records (for AD-synced tenants, sAMAccountName is a common choice)

Inventory Correlation Field

Optional. Inventory attribute to match against the HR field

If you have any questions or need assistance configuring the integration, please contact the AiStrike team.