Skip to content

Microsoft Entra ID integration

Last updated: 2026-07-01

Integrate Dromlik with Microsoft Entra ID (formerly Azure Active Directory) to sync users into Dromlik as extensions and let them sign in to the Dromlik App with their Microsoft account through single sign-on (SSO).

What the integration does

  • User sync — pull selected users and groups from Entra ID into Dromlik and create extensions automatically. Name, email, mobile, department and job title stay in sync.
  • SSO sign-in — users click "Sign in with Microsoft" in the Dromlik App and land straight in — no separate Dromlik password.
  • Automatic deprovisioning — when a user is disabled in Entra ID, their Dromlik extension is disabled on the next sync.

Requirements

  • Microsoft 365 or Azure tenant with an Entra ID plan (any tier).
  • Global administrator or Application administrator role in Entra ID for the initial setup.
  • Administrator access to the Dromlik admin console.

Set up the integration

  1. 1

    Register an application in Entra ID

    In the Microsoft Entra admin center, go to Identity → Applications → App registrations and create a new registration named Dromlik. Set the redirect URI to the value shown in Dromlik under Integrations → Microsoft Entra ID.

  2. 2

    Grant Microsoft Graph permissions

    On the app's API permissions page, add the following Microsoft Graph Application permissions and grant admin consent:

    • User.Read.All
    • Group.Read.All
    • Directory.Read.All
  3. 3

    Create a client secret

    On the Certificates & secrets page, create a new client secret. Copy the value immediately — Entra ID only shows it once.

  4. 4

    Connect Dromlik

    In Dromlik, go to Integrations → Microsoft Entra ID. Paste the Tenant ID, Application (client) ID and Client secret, then click Connect.

  5. 5

    Choose who to sync

    Pick the Entra ID groups whose members should get a Dromlik extension. You can also map Entra ID groups to Dromlik extension groups so new hires land in the right team automatically.

  6. 6

    Enable SSO

    Turn on Single sign-on. Users will now see a "Sign in with Microsoft" button on the Dromlik App sign-in screen.

Troubleshooting

"AADSTS700016: Application not found" — double-check the Tenant ID and Application (client) ID.

Users are synced but SSO fails — verify the redirect URI in the Entra ID app registration matches the one Dromlik shows exactly, including protocol and trailing slash.

A user's extension didn't update after a name change — trigger a manual sync from Integrations → Microsoft Entra ID → Sync now.