This document provides instructions for configuring Directory Synchronization between Azure Active Directory and Konverse.

Follow the instructions below to allow Konverse to connect to the directory using the graph API endpoints and access token provided by Microsoft.

• Endpoint used to sync users 
  • https://graph.microsoft.com/v1.0/users /
• Endpoint used to sync groups 
  • https://graph.microsoft.com/v1.0/groups/%7BgroupId%7D/members%E2%80%9D

            * Only groups configured in the app will be sync'd

Give Consent to the Konverse Directory Sync App

The client ID registered with Azure for the Konverse Directory Sync App is "bb49c463-543a-42cb-8477-d08877e64574".  An Azure administrator will need grant the Konverse app "User.Read.All”, “Group.Read.All” and “Directory.Read.All” permissions to the directory.  

• Click the link to begin the process

https://login.microsoftonline.com/common/adminconsent?client_id=bb49c463-543a-42cb-8477-d08877e64574&redirect_uri=https%3A%2F%2Fkonverse.com 

• When prompted, login as an administrator to Office365
• Review the permissions and click Accept
  

Provide Tenant ID to Konverse

• Login to the Azure Active Directory Admin Center
• Select Azure Active Directory from the menu
• Select Properties from the Manage menu
• Copy the Tenant ID and send it to [email protected] 

 Once the updates are made by the Konverse support team, directory synchronization will happen automatically.