--- title: "Azure Synchronization | Vizito Help Center" description: "Azure Synchronization | Automatically synchronize Azure Entry ID information. | Vizito | Visitor management system" url: https://vizito.eu/faq/integrations/azure-synchronization/ language: en --- # Azure Synchronization Pieter-Jan Dries · Sep 16, 2026 · 5 min In this article You can automatically create new employees in Vizito as users of the system. You can also automatically add them as hosts, from which the visitor can select the person they have a meeting with. Advantages of using this integration are: - All user and host data is always up to date. - Users that no longer work in your organization are automatically removed. - No need to provide passwords for each user, as they can log in using their Microsoft account using Single Sign On. The synchronization will run every day at 00:00 CET. You can also execute a manual synchronization, see step three. In order for the integration to work, you will need to set up a new App Registration in Azure. This should be done by your IT support who is responsible for managing Azure Entry ID. You will need to get the following information from Azure: - Tenant ID - Client ID - Client Secret - Group ID Don’t worry we will guide you through the complete process. ## Step 1: Create a new app registration in Azure Go to [https://portal.azure.com/](https://portal.azure.com/) and log in. Select the domain / tenant you would like to integrate with Vizito. Once logged in, click on the hamburger menu icon in the top left corner: ![Open azure menu](https://vizito.eu/faq/integrations/azure-synchronization/open_azure_menu.webp?width=900) Click on Azure Entry ID: ![Open Azure Entra ID](https://vizito.eu/faq/integrations/azure-synchronization/open_azure_entra_id.webp?width=900) Now that you are in Azure Entra ID, click on the option App registrations in the left hand menu: ![Open app registrations](https://vizito.eu/faq/integrations/azure-synchronization/open_app_registrations.webp?width=900) Click on + New registration to create the new app registration: ![New app registration](https://vizito.eu/faq/integrations/azure-synchronization/new_app_registration.webp?width=900) Fill in the name of the new app registration and set the redirect URI. ![Blank app registration](https://vizito.eu/faq/integrations/azure-synchronization/blank_app_registration.webp?width=900) For the name, you can use a sentence that explains what the app registration does, such as: **Vizito Azure Synchronization** . As for the Regirect URI, choose **Web** as the platform and as the URI, set **https://backoffice.vizito.be/oauth** . Click on Register once everything is correct. ![Register app registration](https://vizito.eu/faq/integrations/azure-synchronization/register_app_registration.webp?width=900) Now you can copy/paste or write down the Application (client) ID (what we refer to as Client ID) and the Directory (tenant) ID (what we refer to as Tenant ID). ![App registration details](https://vizito.eu/faq/integrations/azure-synchronization/app_registration_details.webp?width=900) Next up, we need to add a client secret so that we can authorize as the app registration. Click on Certificates & secrets: ![App registration certificates and secrets](https://vizito.eu/faq/integrations/azure-synchronization/app_registration_certificates_and_secrets.webp?width=900) Click on New client secret: ![New client secret](https://vizito.eu/faq/integrations/azure-synchronization/new_client_secret.webp?width=900) Set a description for the secret, such as **Vizito Azure Synchronization Secret** and set the Expires to **730 days (24 months)**. It is important to set this to a long period as you will have to renew the secret after that period. ![Client secret details](https://vizito.eu/faq/integrations/azure-synchronization/client_secret_details.webp?width=900) Now the client secret has been created. Copy paste or write down the Value of the client secret, as this will only be displayed once. After closing this window, you will no longer be able to access this secret value. If you did not write it down, not a problem, just delete this Client secret and create a new one. Remember to write it down though. ![Client secret value](https://vizito.eu/faq/integrations/azure-synchronization/client_secret_value.webp?width=900) Now go to API permissions in the left hand menu: ![API permissions](https://vizito.eu/faq/integrations/azure-synchronization/api_permissions.webp?width=900) Click on Add a permission: ![Add permission](https://vizito.eu/faq/integrations/azure-synchronization/add_permission.webp?width=900) Click on the Microsoft Graph rectangle: ![Microsoft Graph](https://vizito.eu/faq/integrations/azure-synchronization/microsoft_graph.webp?width=900) In the following window, click on the Application permissions rectangle: ![Application permissions](https://vizito.eu/faq/integrations/azure-synchronization/application_permissions.webp?width=900) Scroll down until you come across the Group list and click on it: ![Group API permission](https://vizito.eu/faq/integrations/azure-synchronization/group_api_permission.webp?width=900) Click the checkbox for GroupMember.Read.All: ![Group Read All](https://vizito.eu/faq/integrations/azure-synchronization/groupmember_read_all.webp?width=900) Scroll down until you come across the User list and click on it. Click the checkbox for User.Read.All and then click on Add permissions: ![User API permission](https://vizito.eu/faq/integrations/azure-synchronization/user_api_permission.webp?width=900) Also add a delegated permission ![Delegated permission](https://vizito.eu/faq/integrations/azure-synchronization/delegated_user_read_1.webp?width=900) for User.Read ![Delegated permission user.read](https://vizito.eu/faq/integrations/azure-synchronization/delegated_user_read_2.webp?width=900) Once the permissions are added, you also need to grant admin consent for those permissions. You can do that by clicking on the Grant admin consent for \[ORGANIZATION\] button: ![Grant admin consent](https://vizito.eu/faq/integrations/azure-synchronization/grant_admin_consent.webp?width=900) And confirm this action: ![Confirmation admin consent](https://vizito.eu/faq/integrations/azure-synchronization/confirmation_admin_consent.webp?width=900) Now, go back to Azure Entry ID by clicking on the hamburger icon in the top left corner: ![Azure menu](https://vizito.eu/faq/integrations/azure-synchronization/azure_menu.webp?width=900) ![Azure Entry ID Menu](https://vizito.eu/faq/integrations/azure-synchronization/azure_entry_id_menu.webp?width=900) Now click on Groups in the left hand menu: ![Azure groups](https://vizito.eu/faq/integrations/azure-synchronization/azure_groups.webp?width=900) Find the group of users that you want to synchronize with Vizito. If you do not yet have a group, create one and assign some users to it. Learn how to do this on the [Azure documentation page](https://learn.microsoft.com/en-us/entra/fundamentals/how-to-manage-groups). And copy or write down the Object ID: ![Object ID for Group](https://vizito.eu/faq/integrations/azure-synchronization/object_id_for_group.webp?width=900) ## Step 2: Configure the collected Azure information in the Vizito backoffice Now, open the [Vizito Backoffice Integrations page](https://backoffice.vizito.be/#/app/integrations), enable Azure Synchronization: ![Enable azure synchronization](https://vizito.eu/faq/integrations/azure-synchronization/enable_azure_synchronization.webp?width=900) Fill in the following information: - Tenant ID - Client ID - Client Secret - Group ID ![Fill in azure integration details](https://vizito.eu/faq/integrations/azure-synchronization/fill_in_azure_integration_details.webp?width=900) And now choose if you want to synchronize the Azure users as: - **Synchronize as hosts:** this way all employees in that user Group will be available as a host from which the visitor can make a selection. The email address and, if available, the phone number will also be synchronized for sending notifications to the user when the visitor signs in or out. - **Synchronize as users:** this way your users can log in to the Vizito backoffice using their Microsoft account via Single Sign On. - **Default user role:** choose the default role that is applied to the users. Check out which [roles Vizito offers](https://vizito.eu/faq/account/user-roles/). ![Save azure integration](https://vizito.eu/faq/integrations/azure-synchronization/save_azure_integration.webp?width=900) Now that everything is saved, you can already initiate a manual synchronization to see if everything is working. ## Step 3: Manual synchronization. You can do a manual synchronization from the integrations page by clicking on the blue Synchronize button: ![Execute manual synchronization of azure](https://vizito.eu/faq/integrations/azure-synchronization/execute_manual_synchronization_of_azure.webp?width=900) If all the details are correct then you should see that the synchronization status states: **Success**. If not, check if everything is in order and re-enter the details that you got from Azure. ![Azure synchronization status](https://vizito.eu/faq/integrations/azure-synchronization/azure_synchronization_status.webp?width=900) **Note:** Under [General](https://backoffice.vizito.be/#/app/account), scroll down to Location settings, and make sure that the Host datasource is set to “Managed within Vizito”.