Microsoft Entra Users

The Microsoft Entra Users tab is designed to allow a PSIsafe administrator to manage PSIsafe accounts that are linked to Microsoft Entra accounts.

Before proceeding, you must configure your PSIsafe installation to interact with your Azure or Microsoft Entra instance. For more information, see Microsoft Entra ID.

To associate a local PSIsafe user account with a Microsoft Entra ID, follow this procedure:

Administrator can review and save the mapping.

At the later opening this tab, there may be mapped users in database. These users will be displayed in the list immediately. If user click to "Get Microsoft Entra Users" again, it will load users from Azure again and add missing users to the list, and run auto mapping again for new loaded users.

To distinguish between the users which the map was saved in database and the user which just mapped automatically, the background of the row will be changed:

Administrator can edit the map manually by editing the PSIsafe User column. The edited user will change to green color if information is correct, or red if information is not correct (wrong user name).

Navigate to User Settings > Users > Microsoft Entra Users.
Select Get Microsoft Entra Users from the top of the table.
After selecting the above, PSIsafe performs an automatic mapping process and the PSIsafe User column is populated with accounts that could be retrieved.

The following row background color scheme corresponds to different kinds of matches between local PSIsafe users and Microsoft Entra IDs:
- White: Currently valid and previously saved users.
- Green: Newly retrieved users who have not been saved.
- Red: Users which could not be mapped automatically after selecting Get Microsoft Entra Users, because PSIsafe could not find a matching email.
- Grey: Users who are deleted within Azure or Microsoft Entra.
Select a mapped account from the list to edit. If a PSIsafe local user account email does not match the Microsoft Entra ID email account, manually input the local PSIsafe username in the PSIsafe login name column on the corresponding row.
Select the Use Microsoft Entra ID checkbox to force a user to log in to PSIsafe applications with only their Microsoft Entra ID, effectively disabling access to PSIsafe applications via their local PSIsafe account credentials alone. This setting enables the same checkbox within the Profile basic information screen.
Click Save to save your current mapping of Microsoft Entra IDs to local PSIsafe user accounts.

To add more Microsoft Entra IDs at a later date, simply repeat the steps above and newly-created accounts within Azure or Microsoft Entra will appear within the list.