Data Manager - Entra ID User Adapter

Introduction

Entra ID User is a tool produced by Microsoft that is used for Systems Management.

Entra ID User Adapter uses an API connection to bring data into Assets Data Manager.

How do I connect this tool to Assets Data Manager?

Follow this procedure to connect this tool to Assets Data Manager using the custom-built Adapter:

1. Gather all of the information listed in the Data Manager Fields section, such as the Name, Object Class, Data Source Name, and Data Source Type.

2. Gather all of the information in the Entra ID User Fields section - this may require consultation with the subject matter expert (SME) for Entra ID User.

3. Within Data Manager:

   1. Create a new job by selecting the Adapter that matches your tool.

   2. Configure all of the required fields with the appropriate information.

4. Within Entra ID User:

   1. To properly configure authentication and authorization, follow all of the steps listed in the Authentication and Authorization section below.

   2. Review the information in the API Call section, below, and ensure the endpoints are available.

   3. Review the information in the Fields Retrieved section, below.

5. Each time this job is run, the data your have selected will be brought into Data Manager using the configured Adapter and become Raw Data.

Data Manager Fields

You will need to specify the following information from Assets Data Manager:

1. Name - the name of the Connection, visible as the job name in Adapters.

2. Object Class - the name of the Object Class you want to the data to be loaded into.

3. Data Source Name - The type of data being created; which is usually the tool name, e.g AD, Qualys etc. Note: This can be the same as Name.

4. Data Source Type - What type of data is Data Platform providing? This is usually the name of the tool (e.g. SCCM, JSMAssets, Qualys) or the discipline (e.g. Asset, CMDB).

Entra ID User Fields

You will need to specify the following information from Entra ID User:

1. Tenant-ID - a unique identifier that identifies the Entra ID tenant to use for authentication.

2. Client-ID - a unique identifier to identify the Microsoft application in Entra ID.

3. Client Secret - a secret string that the application uses to prove it's identity when requesting a token.

4. API Timeout - the Api Timeout restricts the number of fields returned from the source. By default, the API Timeout is set to 0 for Adapters.

1. API Limit - the Api Limit field allows the enforcement of the amount of request/quantity of data (or records) to be consumed by the Data Manager and transferred to the back-end staging database.

Authentication and Authorization

1. Register the application using the Azure Portal to obtain the Tenant ID, Client ID and the Application ID.

2. Generate the Client Secret to obtain the Client Secret ID.

3. On the application's Overview page, under Manage, select API Permissions > Add a permission.

4. Select Microsoft Graph from the list of available APIs. Then add the permission 'User.Read.All' and grant admin consent.

5. Select Add Permissions.

API Call

The API Call for Entra ID Device is User.Read.All.

Fields Retrieved

The following fields are retrieved: