Easy Entra Integration™

Powered by STFWorks©

The Easy Entra Integration™ is an automated seamless way to keep your Oracle Fusion Applications user accounts synchronized with your Microsoft Azure Entra (Active Directory) service. Once enabled, you can control the synchronization of Employee Names, Phone Numbers, Addresses, Emails, Organization Information, Job Titles and more.

Getting Started

Organizing the setup of the integration takes careful planning. You will need the following information:

ITEM	DESCRIPTION	REQUIREMENTS
Azure Entra Connection	Registration of an Application in Microsoft Azure Entra. Optionally use a named user or an application key.	API Permissions: User.ReadWriteAll User-Phone.ReadWrite.All User-Mail.readWrite.All User-EnableDisableAccount.All

Registering an Application in Azure Entra (AD)

The Easy Entra Integration requires access to Azure Entra (AD) with a certain amount of administrative privileges. The integration is able to create and disable accounts as well as update account profile information, which requires certain roles.

STEP

DESCRIPTION

1

From the Microsoft Entra admin center under Applications  App Registrations

2

Create a New registration

3

Enter a Display Name for the application (Easy Entra by STFWorks)

4

Specify who can use the application in the Supported account type session

a. Use Accounts in this organization directory only

5

Select Register to complete the initial registration

a. NOTE The: Application (client) ID

b. NOTE The: Directory (tenant) ID

6

On the left ribbon, select Authentication

a. Toggle the Allow public client flows to Yes

7

On the left ribbon, select API Permissions

Add a permission and choose Microsoft Graph

Add the following permissions

User.ReadWriteAll

User-Phone.ReadWrite.All

User-Mail.readWrite.All

User-EnableDisableAccount.All

Click the Grant admin consent

8

On the left ribbon select Expose an API

Click Add a Scope

Provide the Scope Name	STFWorks
Who can consent	Admins Only
Admin Consent Display	STFWorks Easy Entra
State	Enabled

Click the Add Scope button

Registering Access to the Azure Entra

There are two options for granting access to your Azure Entra system:

1. Named User: In this configuration, the integration will run as this user

2. Certificate: In this configuration, the integration will run as a background process

STEP	OPTION 1 – Named User
1	Create a New User
2	Add the following Directory Roles Authentication Administrator User Administrator
3	Log in as the new user and set the initial password VERY IMPORTANT: Do NOT set this user up with multi-factor authentication

STEP	OPTION 2 – Background Process
1	Open the App Registration created above
2	On the left ribbon select Certificates & Secrets
3	Select the Client secrets
4	Click New client secret Description: STFWorks Easy Entra Choose an expiration according to your security policies Click Add VERY IMPORTANT Copy this Value for later, (this will not be shown again)

Easy Entra Integration™

Powered by STFWorks©