Entra ID sync

Entra ID sync (/admin/entra-sync) connects your Microsoft Entra ID directory to signplume. Until it is connected, the screen shows the one-time setup and the form for the app registration; Connect Microsoft Entra ID walks through both, with every permission signplume asks for.

This is the Microsoft 365 twin of Directory sync, which connects Google Workspace. Connect the one your organisation's directory lives in.

Connection

Once connected, the Connection card shows the directory (tenant) ID, the application (client) ID, when it last ran and how many people it links.

• Sync now runs it straight away. While it is switched on, it also runs on its own about every six hours.
• Pause syncing stops the runs but keeps the credentials; Resume syncing starts them again.
• Last run counts the people the run added, updated, left unchanged, found departed and could not sync. If a run fails, the screen shows Microsoft's own words in a red banner.

A sync brings in each person's name, job title, department, phone numbers, profile photo and the other addresses on their mailbox, which become their aliases on People. It never clears a field Entra does not carry, it leaves alone a field you have handed to people through self-service editing, and when adding someone would take you past your plan's cap, that person is refused and the rest still syncs.

When someone leaves Entra

A disabled Entra account (accountEnabled set to false) or a removed one is always marked departed, and listed under Departed from Entra. By default a departed person still counts towards your plan and keeps their signature until you archive them on People. Press Archive leavers automatically to have each sync archive them for you; the archive is reversible, so a mistake is one click to undo. If someone the sync archived comes back (an account that is enabled again in Entra, or a new account on the same address), the next sync restores them and their signature returns. It costs a seat; if your plan is full they stay archived until there is room. Someone you archived yourself on People is never restored by a sync. An empty or failed listing never counts as everyone leaving, so it never archives in bulk.

Groups

With Group.Read.All granted, your Entra groups sync too, for group templates on Rules and group audiences on Campaigns. Without it, groups are skipped and the people still sync.

Replace credentials

Replace credentials, at the bottom, takes a new client secret, for example when the old one expires. Saving always replaces the stored secret; there is no way to change the other fields and keep it. The secret itself is never shown on this screen.