Welcome to the Axero integration guide for Microsoft Entra ID (formerly known as Azure Active Directory). This documentation will help you establish a secure and efficient connection between Axero and your organization's Entra ID tenant, enabling Single Sign-On (SSO) capabilities and enhancing overall security.
Microsoft Entra ID is Microsoft's cloud-based identity and access management service. It enables seamless authentication and resource access for employees and serves as a centralized hub for managing identities, applications, and access control.
There are two primary integration paths for Entra ID with Axero:
Single Sign-On (SSO) allows users to access multiple applications with a single set of credentials. With Entra ID's SAML integration, users can securely log in and out of Axero using their Entra ID credentials. This feature streamlines the authentication process and enhances security by centralizing user access management through Entra ID.
User provisioning refers to the process of creating and managing user accounts. While SAML requires manual user provisioning in Axero, SCIM enables automated user provisioning. With Entra ID's SCIM integration, user accounts can be automatically created, updated, and deactivated in Axero based on changes made in Entra ID, reducing administrative overhead and ensuring consistency across systems.
User creation is the process of establishing new user accounts. In the SAML integration, user accounts are created in Axero on the user's first login. With SCIM, Entra ID can automatically create user accounts in Axero as soon as they are added to the Entra ID directory, ensuring that users have immediate access to the platform without requiring manual intervention.
User deprovisioning is the process of removing or deactivating user accounts. In the SAML integration, user deprovisioning must be done manually in Axero. With SCIM, Entra ID can automatically deprovision users in Axero when their accounts are disabled or deleted from Entra ID, ensuring prompt removal of access for departed employees or contractors.
Default Axero attributes are the standard user profile fields supported by the platform. Both SAML and SCIM integrations with Entra ID support mapping and synchronizing these default attributes, ensuring that essential user information is consistently maintained across both systems. Default attributes typically include First Name, Last Name, Email Address, Phone Number, Department, and Job Title.
Custom attributes are user-defined fields that extend the standard user profile. These fields can be used for display purposes or to set up Personas for more detailed assignment rules on your site. Both SAML and SCIM integrations with Entra ID support the synchronization of custom attributes.
The User's Manager feature allows employees to be associated with their supervisors. Both SAML and SCIM integrations with Entra ID support the synchronization of manager information, enabling accurate representation of organizational hierarchies within Axero.
The Hire Date attribute represents an employee's start date with the organization. Both SAML and SCIM integrations with Entra ID support the synchronization of hire dates, allowing for accurate tracking of employee tenure within Axero. Hire Date can be mapped from the "employeeHireDate" attribute in Entra ID and used in Personas to create New Hire cohorts.
Entra ID Groups are collections of users that can be used for access management. In the SAML integration, groups are synchronized to Axero via Group Claims in the SAML token during login. With SCIM, groups are synchronized using Group Provisioning, which enables real-time updates of group memberships when changes occur in Entra ID. These groups can be used with Personas to manage space membership in Axero.
Profile images are user avatars displayed in the Axero platform. Although Entra ID does not include user photos in SAML tokens or SCIM payloads, you may enable Axero's User Syncing to automatically upload photos. Alternatively, you can use our Add User Image API to upload images or have users manually upload their profile pictures.
The sync schedule determines how frequently user information is updated between Entra ID and Axero. With SAML, user information is typically synchronized only when the user logs in. SCIM offers real-time synchronization, ensuring that any changes made in Entra ID are immediately reflected in Axero and providing up-to-date user information at all times.
Need further assistance? Submit a support ticket to our technical support team for personalized help. To expedite the troubleshooting process, please include relevant error messages or screenshots from both Entra ID and Axero.
We value your feedback! If you have suggestions for improving this documentation, please let us know when submitting a support case.
is requesting access to a wiki that you have locked: https://my.axerosolutions.com/spaces/5/axero-documentation/wiki/view/24742/entra-id
Your session has expired. You are being logged out.