Entra ID User & Group Sync in CurrentWare

Entra ID User & Group Sync in CurrentWare

OVERVIEW:
This feature allows the import and synchronization of users and groups from Microsoft Entra ID, enhancing CurrentWare’s existing Active Directory integration. It enables administrators to define and apply policies for users in advance, so that when users connect to CurrentWare, the appropriate policies are already in place, ensuring consistent and seamless policy enforcement from day one.

Release Version: 12.0.0

Who Is This For?

This feature is designed for IT administrators who want to:
  1. Centralize user management in Entra ID
  2. Automatically import users into CurrentWare
  3. Keep user accounts and group memberships synchronized
  4. Reduce manual user administration and policy errors

What Gets Synced

Supported features

  1. Entra ID users
  2. Entra ID security groups
  3. Group-to-CurrentWare group mapping
  4. Scheduled synchronization

Prerequisites

Before connecting CurrentWare to Entra ID, you must create an App Registration in Entra ID.

Step 1: Register CurrentWare in Entra ID

  1. Sign in to the Microsoft Entra admin center
    1. Navigate to Azure Active Directory (Entra ID)
  2. Register a new application
    1. From the left-hand menu, click App registrations
    2. Click New registration

    3. Enter a name (example: CurrentWare User Sync)
    4. Select Single tenant
    5. Leave Redirect URI blank
    6. Click Register


Step 2: Record Required IDs

After registration, note the following values:

  • Application (Client) ID
  • Directory (Tenant) ID

These values are required when configuring the connection in CurrentWare.

Step 3: Configure Authentication

CurrentWare supports Client Secret authentication (certificate-based authentication may be added later).

Create a Client Secret

  1. In the App Registration, go to Certificates & secrets
  2. Click New client secret
  3. Add a description and expiration
  4. Copy the Secret Value (this is shown only once)

Step 4: Assign Microsoft Graph Permissions

Once the group and client secrets are created, you need to apply read permissions on the group. 

Assign Permissions

  1. Select the API Permissions (left-hand menu) 
  2. Select Add Permission
  3. Select Microsoft Graph
  4. Search for these permissions:
    1. User.Read.All
    2. Group.Read.All

  5. Apply these permissions and on the main API Permissions window select Grant admin consent for your organization.



Connecting Entra ID to CurrentWare

  1. In CurrentWare, go to Tools → Import Users
  2. Select Action: Entra ID Import & Sync
    1. Enter the information for the following fields:
      1. Tenant ID
      2. Application ID
      3. Client Secret
  3. Click Connect

Once connected, CurrentWare will validate the credentials and prepare the group selection step.

Selecting Entra ID Groups

After a successful connection:

  1. Choose how users will be imported:
    1. By Entra ID Groups (Administrative Units may be supported in future releases)
  2. Select one or more Entra ID groups to import
  3. Review the detected users

Only users who belong to the selected groups will be imported into CurrentWare.

Group Mapping & Priority

  1. If a user belongs to multiple Entra ID groups, CurrentWare allows you to:
    1. Map Entra ID groups to CurrentWare groups
    2. Define group priority using drag-and-drop ordering
  2. The highest-priority group determines which policies are applied to the user.

This interface is the same as the existing Active Directory security group import workflow.

Sync Settings

You can configure synchronization behavior directly in the setup flow:

  • Enable or disable synchronization
  • Set the sync interval
  • Edit or disconnect the Entra ID connection at any time

When sync is enabled, CurrentWare will:

  • Add new users
  • Update existing users
  • Reflect group membership changes

Important Notes & Limitations

  • Entra ID imports operate with directory-wide read permissions, so careful group selection is recommended
  • Migrating from local Active Directory to Entra ID may require clearing existing users to avoid duplicates
  • Users are matched using unique identifiers to prevent conflicts
  • Operator accounts are not imported in this version


Troubleshooting

If the connection fails:

  • Verify the Client Secret has not expired
  • Ensure the correct Tenant ID is being used
  • Review CurrentWare server logs for detailed error messages - Contact support at support@currentware.com

Security Considerations

  • Client secrets should be stored securely
  • Rotate secrets regularly based on your organization’s security policy

    • Related Articles

    • Importing Users from Active Directory (AD Sync) with CurrentWare

      With just a few simple steps, you can effortlessly import user profiles and organizational structures directly from your AD server. This integration ensures that your CurrentWare Server remains in sync with your existing user database, reducing ...

    • Import Users from Active Directory

      Efficiently manage your workforce with CurrentWare’s seamless integration of Active Directory (AD) user importation. By importing users from AD into your CurrentWare Server, you can streamline user management and effortlessly align your ...

    • PC vs User Mode

      With your CurrentWare console you have two main ways of setting up groups for reports, policies or restrictions. User Mode PC Mode PC Mode PC mode is grouping your console to show all of your PCs with clients installed. You will be able to place ...

    • Using CurrentWare to Lock Down a Machine When a User Gives Notice

      Purpose: This document outlines the steps to restrict a user’s access to the company network and secure their workstation using CurrentWare when they give notice. Step 1: Preparation Before making any changes to your end user with the CurrentWare ...

    • Use Group Grading to Classify Group Productivity

      Setup productivity grades for specific groups When BrowseReporter tracks time spent on websites and applications it automatically assigns a productivity grade of productive, unproductive, or neutral. This allows you to understand how much time is ...