Configure Aurora Endpoint Security to synchronize with Entra Active Directory

To configure Aurora Endpoint Security to synchronize with Entra Active Directory, you must configure both Entra and Aurora Endpoint Security to make the connection.
  1. Log in to the Azure portal.
  2. Create a new app registration for Entra Active Directory and assign the appropriate settings and permissions.
    1. Add a name for the app.
    2. Specify the account types can use the application or access the API.
    3. Select Web as the redirect URI type and set the URI as http://localhost.
    4. Set the following application permissions:
      • Group.Read.All (Application)
      • User.Read (Delegated)
      • User.Read.All (Application)
    5. Grant Admin consent to the application.
  3. Record the name you assigned to the app and the Application (client) ID.
  4. Create a new client secret and record the information in the Value column of the secret.
    Important: The Value is available only when you create it. You cannot access it after you leave the page. If you do not record the value, you must create a new one. This is used as the Client secret in the management console.
  5. In the management console, on the menu bar, click Settings > Directory Connections.
  6. Click Add New Connection.
  7. Type a Name for the directory connection and the Domain for your Entra Active Directory.
  8. In the Client ID field, type the application ID generated by the Entra app registration.
  9. In the Client secret field, type the client secret value that was generated by the Entra app registration in step 4.
  10. Click Add.