> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/ways-to-onboard-a-user/importing-users/importing-from-azure-ad.md).

# Importing from Azure AD

Azure AD (Microsoft Entra ID) differs from AD and OpenLDAP in two ways: it authenticates with an app registration rather than a bind DN, and it filters users by email domain and account status instead of by container.

{% stepper %}
{% step %}

## Open the wizard and create a connection

Click **Import → Azure AD**.

![The Azure AD entry in the Import menu.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/1xf6RJBy5ZZcMwMbgvt1/assets/rId119.png)

In **Azure AD Configuration**, select **New Connection** and click **Continue**.

![The Azure AD Configuration dropdown.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/HTVilCMZHL8zbYFmilDC/assets/rId122.png)
{% endstep %}

{% step %}

## Enter the Azure credentials and filters

Name the connection, then enter the **Tenant ID**, **Client ID** and **Client Secret** from your Azure app registration.

![The Configure Azure AD form.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/9X8EstCHlT0lXTR8KN0l/assets/rId126.png)

Click **Test Connection**.

![The completed Azure AD form.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/z3jlpTue4I1tiSEIerKa/assets/rId129.png)

A green confirmation means the credentials are valid and SECUREpass can read the tenant.

![A successful Azure AD test connection.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Ysry2chZkF6qlJ5YbuNm/assets/rId132.png)
{% endstep %}

{% step %}

## Narrow the import

**Email Domain Filter** and **User Status** are the Azure equivalent of container selection. Use them to avoid pulling in guest accounts, disabled leavers or users from other verified domains in the same tenant.

![The Email Domain Filter and User Status controls.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/yez0AiAjvWlMnwfXOvSZ/assets/rId136.png)

{% hint style="info" %}
Setting **User Status** to **Both** imports disabled Azure accounts as well as active ones. Unless you have a reason to hold leavers in SECUREpass, choose **Active Users**.
{% endhint %}
{% endstep %}

{% step %}

## Map attributes and import

Mapping works exactly as in section 4.4.

![The Azure AD attribute mapping step.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/XI5VEUUeNaGHJSKBDXeT/assets/rId140.png)

![Adding a custom attribute for the Azure AD import.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/1bDBQsS4sjI4UvgMMr5f/assets/rId143.png)

Click **Import**.

![The Import button on the Azure AD wizard.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/nZHw1ZnHyJiUA2GB6TJ8/assets/rId146.png)

![Users fetched from Azure AD.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/IT0hjpE9unZW9cXuawiD/assets/rId149.png)

Select the users you want and click **Save**.

![The saved Azure AD users on Manage Users.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/PUhh71QTIJThChHznZOM/assets/rId152.png)
{% endstep %}
{% endstepper %}