Admin Synchronisation : Microsoft Entra ID API – Phriendly Phishing

Admin Synchronisation via API connects your Microsoft Entra ID to your Phriendly Phishing account for company administrative requirements requiring access to the Phriendly Phishing platform. When an administrator is configured in your AD, they will automatically synchronise as an Admin in your Phriendly Phishing account. When an administrator is removed from your Microsoft Entra ID, they will also be removed from your Phriendly Phishing account on the next scheduled sync.

This article takes you through the steps in synching your Admins to the Phriendly Phishing platform:

- How to Create a New Enterprise Application in your Microsoft Entra ID
- How to Assign Groups to the created Enterprise Application
- How to Configure the Microsoft Entra ID API Admin Synchronisation in Phriendly Phishing

Requirements

It is required to have a Microsoft Entra tenant. You will also be required to have a security group within your tenant that lists all admins that you would like to be added into Phriendly Phishing.
There is a required change that needs to be done by Phriendly Phishing. Please contact Support and mention that you want to synchronise Platform Admins via API. If this is not done, you will encounter below error message.

How to Create a New Enterprise Application in Microsoft Entra ID

Sign into Microsoft Azure and select Enterprise applications.
Select New application then Create your own application.
Enter a name for your application and follow per screenshot below

How to Assign Groups to the created Enterprise Application

In the Overview page of the application, select Users and Groups > Add User / Group.
Select User and Groups and search the group/s you want to assign.
Select

How to Configure Admin Synchronisation in Phriendly Phishing

Log in to your Phriendly Phishing account. Go to Settings and follow through per the screenshot below.
Click Log In to Azure button

Reminder

You need to be assigned as a minimum requirement the Application Administrator role within your Microsoft Entra ID environment
Add the Security Group name/s that you previously assigned in the application and select Save Settings. Follow through below screenshot.

Reminder

If the group name entered in the Phriendly Phishing platform is not an exact match to that in your AD, sync won't be successful.
Manually Trigger Sync and the newly synched Admins appears under the notification bell.

You have now completed the implementation of Admin Synchronisation using Microsoft Entra ID API.

Related to