Provisioning- Configure Microsoft 365 with Zoho Directory - Admin Panel | Zoho Directory

Configure provisioning for Microsoft 365 with Zoho Directory

User provisioning with Microsoft 365 enables you to provision and deprovision users in Microsoft 365 from Zoho Directory Admin Panel, enabling you to use Zoho Directory as a single source of information.

Prerequisites

In Zoho Directory
  1. Roles that can perform this action:
    1. Organization Owner
    2. Organization Admin
  2. Permission required:
    1. View apps
    2. Assign apps
    3. Import apps
In Microsoft 365
  1. Roles that can perform this action:
    1. Owner or App Admin role
  2. A custom domain must be added and verified. To add and verify your domain, follow the steps in Add your custom domain name in Microsoft Entra ID.
  3. An application must be registered in Microsoft Admin Center and configured with the required authentication settings. To complete this setup, follow the steps under Configure SAML in Microsoft 365.

In Zoho Directory:

  1. Sign in to Zoho Directory, then click Admin Panel in the left menu.
  2. Click App Management, the Applications module opens by default.
  3. Click Add Application.
  4. Use the search bar to find and add Microsoft 365.

  5. Name your app, then enter the Domain Name and Tenant ID.
    Notes
    Enter your verified domain name in the Domain Name field. Go to the Microsoft Entra admin center, under Entra Id, then click Overview. Copy the Tenant ID displayed in the Overview.
  6. Click Add.
  7. Click Microsoft 365, then click Configure under the Provisioning tab.

  8. In the Provisioning section, fill in the following fields:
    1. OAuth Consumer Key: Paste the Application ID that you copied from Microsoft 365.
    2. OAuth Consumer Secret: Paste the Client Value that you copied from Microsoft 365.
    3. Authorization Endpoint: Enter the authorization endpoint in the format: https://login.microsoftonline.com/<tenant ID>/oauth2/v2.0/authorize
    4. Token Endpoint: Enter the token endpoint in the format: https://login.microsoftonline.com/<tenant ID>/oauth2/v2.0/token
  9. Click Authorize. A new tab will open, requesting your consent to access information in Microsoft 365.
  10. Click Allow. You will be redirected to the FIELD MAPPING section of Zoho Directory.
  11. Select the fields that have to be synced with Microsoft 365, and map a relevant Zoho Directory field with them. If you'd like to have a constant value set in Microsoft 365 for any field, click Edit next to the field, enter the value in the Hardcoded Value field, then click OK.
    Notes
    By default, all Microsoft 365 fields will be mapped to a relevant Zoho Directory field. To change this mapping, you should have the Standard or Professional plans in Zoho Directory.
  12. Click Save and Next.
  13. Choose which of the changes made in Zoho Directory have to be synced with Microsoft 365:
    1. Create users: Assigning a user to Microsoft 365 in Zoho Directory automatically creates a new user account in Microsoft 365.
    2. Update User profile: If a user account already exists in Microsoft 365 for a user, any changes made to the mapped fields in user's profile in Zoho Directory will be synced with Microsoft 365.
    3. Delete Users: When a user is unassigned from the Microsoft 365 in Zoho Directory, the existing user's account will be deleted in Microsoft 365.
    4. Activate and deactivate Users: Activating and deactivating users in Zoho Directory will activate or deactivate them in Microsoft 365. Additionally, users who have an account in Microsoft 365 will be activated when they are assigned to the app in Zoho Directory.
  14. Click Save.
  15. If you wish to import users from Microsoft 365 to Zoho Directory, click Import. We suggest that you import users during initial setup or when activating the app later. A list of users that can be imported will be displayed based on the following filters:
    1. New Users: Users in Microsoft 365 who do not have an account in Zoho Directory. Users you select here will be added to Zoho Directory and, Microsoft 365 will be assigned to them.
    2. Update Users: Users in Microsoft 365 who already exist in Zoho Directory will have their profile attributes updated based on the source profile you choose. The selected users existing details will be overwritten with the attributes from the chosen source.
    3. Users to Activate: Microsoft 365 users who are inactive in Zoho Directory but active in Microsoft 365 will be listed here. These users will be activated in Zoho Directory and unassigned to Microsoft 365.
    4. Users to Deactivate: Microsoft 365 users who are active in Zoho Directory but inactive in Microsoft 365 will be listed here. These users will be disabled from Microsoft 365 during import.
  16. Click Confirm Assignment.
  17. Click Done.