Identity Provider Integration

Azure AD / Entra ID

Integrate with Microsoft Azure Active Directory and Entra ID for continuous identity sync, Conditional Access context, and risk-based access control.

Capabilities

Key features

Microsoft Graph API

Deep integration with Microsoft Graph for full Azure AD and Entra ID data access.

Delta Sync

Efficient delta queries to sync only changed users, groups, and directory objects.

Conditional Access

Import Conditional Access policies and session context for enhanced security decisions.

Organizational Units

Map Azure AD organizational structure, management hierarchy, and administrative units.

Privileged Roles

Track Azure AD privileged role assignments and PIM activations in real-time.

Sign-In Logs

Stream sign-in events and risk detections for adaptive access control.

How it works

Connect Azure AD / Entra ID in four steps.

01

Register App

Create an app registration in Azure AD with appropriate Microsoft Graph API permissions.

02

Initial Sync

TigerIdentity performs a full sync of users, groups, service principals, and directory roles.

03

Delta Updates

Continuous delta queries keep identity data fresh with minimal API calls.

04

Stream Events

Real-time sign-in logs, audit events, and risk detections feed into access decisions.

Identity Provider Integration

Real-time identity signals from Azure AD / Entra ID.

Every event, action, and change from Azure AD / Entra ID feeds the TigerIdentity policy engine and TIDR baseline in real time.

< 50 ms

Identity Provider Integration

Setup

Configuration example

connector.yaml
connector:
  type: azure-ad
  name: "azure-ad-production"

  config:
    tenant_id: "${AZURE_TENANT_ID}"
    client_id: "${AZURE_CLIENT_ID}"
    client_secret: "${AZURE_CLIENT_SECRET}"

  sync:
    users: true
    groups: true
    service_principals: true
    directory_roles: true

  events:
    sign_in_logs: true
    audit_logs: true
    risk_detections: true

  mapping:
    user_attributes:
      - azure: userPrincipalName
        tiger: email
      - azure: department
        tiger: department
      - azure: manager
        tiger: reports_to
      - azure: jobTitle
        tiger: title
Use cases

Common use cases

Microsoft 365 Identity

Sync Azure AD as the source of truth for Microsoft 365 users and security groups.

Risk-Based Access

Use Azure AD Identity Protection risk scores to dynamically adjust access requirements.

PIM Integration

Track Privileged Identity Management role activations and enforce time-bound access.

Hybrid Identity

Unify on-premises AD and Azure AD identities into a single identity graph.

Ready to connect Azure AD / Entra ID?

See how TigerIdentity integrates with your Azure AD / Entra ID environment in a personalized demo.