Azure Active Directory
Introduction
This document provides comprehensive instructions for integrating Azure Active Directory (Azure AD) with Automate, a powerful workflow automation platform. Azure AD assists in centrally managing authentication, authorization, and access control for users and devices. Integrating Azure AD with Automate enhances security and simplifies management, especially for organizations utilizing Microsoft Azure cloud services.
What is Azure Active Directory?
Azure Active Directory (Azure AD) is a robust identity management tool designed to centralize authentication and access control for users and devices. It plays a critical role in managing security and access across various applications and services within the Microsoft Azure ecosystem.
Automate Integration with Azure AD
Automate offers a set of pre-built actions that empower users to perform essential operations within Azure AD directly from their workflows. These actions streamline user management tasks and facilitate efficient access control within Azure AD. To use your credentials in Autom, you need to go to Vault page and add your credentials.
Credentials
To use Azure Active Directory actions within Autom Mate, you must first establish secure credentials. Follow the steps below to configure your credentials:
Navigate to Vault
Go to the Vault page in Autom Mate and select the option to add a new credential.
Define Connector Name
Enter a friendly, unique name for your connector (e.g., AzureADConnector
). This name helps in easily identifying the credential for workflows.
Authentication Type Selection
Set the Authentication Type to oauth20
to allow secure OAuth 2.0 authentication with Azure Active Directory.
Retrieve and Enter Client ID
Go to the Application page on the Azure Portal to find your Client ID. This value is essential for the authorization process.
For assistance in locating or generating the Client ID, refer to the Azure Registration Quickstart Guide.
Provide Client Secret Value
In the Azure Portal, generate a Client Secret from the Application page, which Autom Mate will use for secure access to Azure Active Directory.
Additional information on creating and retrieving the Client Secret is available in the Azure Client Secret Documentation.
Enter Tenant ID
Input the Tenant ID, which can be specified in either GUID or friendly name format. This is the directory tenant from which permissions are requested.
Save the Credential
After entering all required fields, save the credential. Your Azure Active Directory credential is now set up and ready for use within Autom Mate actions.
How To Use Actions
Create User
Description and Purpose
The Create User action enables administrators to create a new user account within the Azure Active Directory environment. This action is designed to streamline the onboarding process by automating user account creation with required details in Azure AD.
Usage Instructions
Enter User Information
Provide the following fields to configure the user account:
Display Name: Input the full display name for the user (required).
Password: Set an initial password for the userβs login (required).
Account Enabled: Choose if the user account should be enabled or disabled upon creation. Options:
Yes
No
User Principal Name: Enter the unique principal name for the user, typically in the format
[email protected]
(required).Force Change Password Next Sign In: Indicate if the user should change their password at the next login (required). Options:
Yes
No
Mail Nickname: Enter a nickname for the userβs mail, typically used as an email alias (required).
Execute the Action
Run the action to create the new user in Azure AD with the specified configurations. The system will confirm the creation or return any errors encountered.
Input
displayName (Required): The full name displayed in Azure AD for the new user.
password (Required): Initial password set for the userβs account.
accountEnabled (Required): Specifies whether the account is enabled upon creation. Options:
Yes
No
userPrincipalName (Required): Unique identifier for the user, typically following the format
[email protected]
.forceChangePasswordNextSignIn (Required): Specifies if the user should be prompted to change their password at next sign-in. Options:
Yes
No
mailNickname (Required): A nickname or alias for the userβs email address.
Get All Users in Organization
Description and Purpose
The Retrieve All Users action enables administrators to obtain a comprehensive list of all user accounts registered within the Azure Active Directory (Azure AD) organization. This action is essential for gaining insights into active user accounts, auditing, and maintaining up-to-date records.
Usage Instructions
Execute the Action
Simply run the action to retrieve a complete list of users within the Azure AD organization. No additional configuration or input fields are required.
Get User by Mail
Description and Purpose
The Get User by Mail action retrieves specific details of a user in Azure Active Directory based on their email address. This action is useful for quickly accessing user-related information through their registered email.
Usage Instructions
Enter the Email Address
In the input field labeled Email, provide the userβs email address for which you wish to retrieve details. This must be a valid email address associated with a user in Azure Active Directory.
Execute the Action
Run the action to send a request to Azure Active Directory. The system will retrieve and display the user details based on the provided email.
Update User
Description and Purpose
The Update User action allows users to modify specific attributes and details of an existing user in Azure Active Directory. This action is essential for maintaining up-to-date user information and managing user attributes effectively within the directory.
Usage Instructions
Enter the User ID
In the input field labeled User ID, provide the unique identifier of the user whose information needs to be updated. This ID should correspond to an existing user in Azure Active Directory.
Execute the Action
Run the action to apply the updates. Azure Active Directory will process the request and update the user information based on the provided User ID.
Last updated