How to implement an outgoing user provisioning from Azure Cloud to an external system

Alexander Diedler 1 Reputation point
2021-02-24T10:54:40.347+00:00

I need a process / programming / tool to have an automatic process, everytime a new user was created in a group or a user was changed (surname, givenname etc) I need to transfer this user object informations (username, surname, givenname, e-mail) to an external system to update the user there. I didn´t found any good solution, I watch out for Azure Automate, Azure Graph API, Subscription model but no good idea to handle this. Does anybody have any idea to get a trigger or listener on an Azure Object (group) for any changes and send this changes to an external system?

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,707 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,655 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. amon 121 Reputation points Microsoft Employee
    2021-02-24T13:19:26.37+00:00

    All Azure AD activity is logged in the Activity Report, you can publish the data to a workspace and configure a trigger to a logic app to do whatever you want.
    The events you probably want to listen to:

    • Add group
    • Add member to group
    • Update user attribute
    1 person found this answer helpful.
    0 comments