> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierzerocode.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID

> Configure Microsoft Entra ID User Integration

The following steps will integrate Microsoft Entra ID by using an Enterprise Application / Application Registration with the below API permissions. Currently setup is limited to using a Service Principal Name (SPN) with a client id, client secret, tenant id, and domain.

## Required Permissions

| API             | Permissions Name                   | Type        | Description                            | Admin Consent Required |
| --------------- | ---------------------------------- | ----------- | -------------------------------------- | ---------------------- |
| Microsoft Graph | AuditLog.Read.All                  | Application | Read all audit log data                | Yes                    |
| Microsoft Graph | Directory.Read.All                 | Application | Read directory data                    | Yes                    |
| Microsoft Graph | User.Read.All                      | Application | Read all users' full profiles          | Yes                    |
| Microsoft Graph | UserAuthenticationMethods.Read.All | Application | Read all users' authentication methods | Yes                    |

## Setting Up Microsoft Entra ID User Integration

In Tier Zero Code, go to "Integrations" and click on the Microsoft Entra ID user integration then enable and configure integration.

<img src="https://mintcdn.com/awbtechllc/2FjNwr4WL5A3MnPm/images/image-1.png?fit=max&auto=format&n=2FjNwr4WL5A3MnPm&q=85&s=117af8168ba71dcc668e57b5a931257f" alt="Image" width="1919" height="924" data-path="images/image-1.png" />

In the Microsoft Entra ID Configuration, you'll need the following fields:

<ResponseField name="Client ID" type="string" required>
  The application (client) ID from the “Overview” section of your app registration
</ResponseField>

<ResponseField name="Client Secret" type="string" required>
  The client secret value from the “Certificates and secrets” section of your app registration
</ResponseField>

<ResponseField name="Tenant ID" type="string" required>
  The directory (tenant) ID from the “Overview” section of your app registration
</ResponseField>

<ResponseField name="Tenant Domain" type="string" required>
  The primary domain from the "Home" of your Microsoft Entra admin center.
</ResponseField>