Overview
This guide provides a step-by-step process for integrating Microsoft Entra ID with Axiom Security.
Prerequisites
Ensure you have the following before starting the integration:
Requirement | Details |
Axiom Tenant Admin Access | Required for configuring the integration. |
Tenant ID | Needed to authenticate Axiom with Entra ID. |
Azure Application | Must be created in Microsoft Entra ID. |
Azure Application Client ID | Required for API authentication. |
Azure Client Secret | Generated from the Azure application. |
Integration Setup
Microsoft Entra ID Configuration
Create an Application in Entra ID
Navigate to the Active Directory Console
On the left-side navigation menu, select 'Manage' > 'App registrations'
Click 'New registration':
Define application name: e.g. "Axiom Integration".
Keep other settings as default and click Register.
Click 'Register'
Configure API Permissions
In the left-side navigation menu, select 'Manage' > 'API permissions':
Click 'Add a permission':
Select "Microsoft Graph"
Choose Application Permissions:
Add the following permissions:
Application.Read.All
Domain.Read.All
Group.Read.All
GroupMember.Read.All
RoleManagement.Read.All
RoleManagement.Read.Directory
User.Read.All
GroupMember.ReadWrite.All
RoleManagement.ReadWrite.Directory
Application.ReadWrite.OwnedByClick 'Add permissions'
Click 'Grant admin consent for [YourOrganizationName]'
Retrieve Required Credentials
Tenant ID:
Go to Active Directory Overview.
Copy the Tenant ID from the basic information section.
Client ID (Application ID):
Go to App Registrations.
Select the newly created application.
Copy the Application (Client) ID.
Client Secret:
Navigate to Certificates & Secrets.
Click New client secret.
Create the new secret and copy the value (Client Secret).
When you've completed these steps, your configured permissions should look like the screenshot below:
Axiom Security Configuration
In the Axiom platform, open the 'Integration Page' from the left-side navigation menu:
Click on '+Add' in the Entra ID card
Provide the following:
Name (integration name)
Tenant ID - copied in section 3a.
Client ID - copied in section 3b.
Client Secret (=Value) - copied in section 3c.
Click on 'Integrate'.