--- title: "Entra ID" slug: "entra-id" description: "Learn how to connect Clarity Security to Microsoft Entra ID to automate your identity life cycle management and user access reviews." tags: ["Azure Active Directory", "Active Directory"] updated: 2026-03-11T21:17:43Z published: 2026-03-11T21:17:43Z canonical: "help.claritysecurity.com/entra-id" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # Entra ID This guide will teach you how to set up the connector between Entra ID (formerly Azure Active Directory) and Clarity Security. **Estimated time to complete:** 5 minutes If you run into any problems, please contact your support team or [support@claritysecurity.io](mailto:support@claritysecurity.io). --- Before you begin - You will need an admin to login an approve the permissions in Step 8 - If you are using Entra Privileged Identity Management, please refer to this article for additionally required scopes: [PIM/PAM Entitlement Considerations](/docs/pimpam-entitlement-considerations) --- ## How to Setup the Connector ### Step 1: Select Applications and click on Marketplace ![ALTTEXT](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679435918087%281%29.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A58%3A54Z&se=2026-11-12T19%3A58%3A54Z&sr=c&sp=r&sig=D9U1Q%2FxEKZ5gCEcRVxI9cjRxVtzQywjgpmwe8SjH%2FSw%3D) ### Step 2: Search for Entra ID and click Connect ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image(538).png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A58%3A54Z&se=2026-11-12T19%3A58%3A54Z&sr=c&sp=r&sig=D9U1Q%2FxEKZ5gCEcRVxI9cjRxVtzQywjgpmwe8SjH%2FSw%3D) ### Step 3: Fill out the Connect App form ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1741793826126.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A58%3A54Z&se=2026-11-12T19%3A58%3A54Z&sr=c&sp=r&sig=D9U1Q%2FxEKZ5gCEcRVxI9cjRxVtzQywjgpmwe8SjH%2FSw%3D) Details for fields common to all applications can be found in the following article: [Common App Configuration Steps](/home/docs/common-app-configuration-steps) ### Step 4: Fill out the App Settings form > [!NOTE] > Trust Relationship and Read/Write Permissions > > The **Trust Relationship** you select determines if you are prompted to provide **Read** or **Read/Write** permissions for the Entra Enterprise Application in Step 8. ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%283%29.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A58%3A54Z&se=2026-11-12T19%3A58%3A54Z&sr=c&sp=r&sig=D9U1Q%2FxEKZ5gCEcRVxI9cjRxVtzQywjgpmwe8SjH%2FSw%3D) Details for fields common to all applications can be found in the following article: [Common App Configuration Steps](/home/docs/common-app-configuration-steps) ### Step 5: Fill out the User Settings form ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%282%29.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A58%3A54Z&se=2026-11-12T19%3A58%3A54Z&sr=c&sp=r&sig=D9U1Q%2FxEKZ5gCEcRVxI9cjRxVtzQywjgpmwe8SjH%2FSw%3D) Details for fields common to all applications can be found in the following article: [Common App Configuration Steps](/home/docs/common-app-configuration-steps) ### Step 6: Validate Your Selections and Save ### Step 7: Navigate to your New Connector This should happen automatically. ### Step 8: Log in to your Entra account Tenant Selection If your account has access to **multiple tenants**, the most recently accessed environment will be the one you are prompted to create the GATE application in. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1773263628948.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A58%3A54Z&se=2026-11-12T19%3A58%3A54Z&sr=c&sp=r&sig=D9U1Q%2FxEKZ5gCEcRVxI9cjRxVtzQywjgpmwe8SjH%2FSw%3D) ### Step 9: Review and accept the Permissions > [!NOTE] > Enterprise Applications and Permissions > > After approving the permissions, there will be a new Enterprise Application in Entra named **ClaritySecurity.** > > You will be prompted for **Read** or **Read/Write** depending on what you selected for your **Trust Relationship** in Step 4 ![image.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image%28537%29.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A58%3A54Z&se=2026-11-12T19%3A58%3A54Z&sr=c&sp=r&sig=D9U1Q%2FxEKZ5gCEcRVxI9cjRxVtzQywjgpmwe8SjH%2FSw%3D) ### Step 10: Sync your application --- ## Need help? If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST. Single Source of Truth: Partial Source of Truth: Application which provides some of the identities for your organization. Ex: HR platform, Azure Active Directory Recipient only: Identities will not be created based on this source of truth. Ex: Zoom, Slack GATE = Gateway for Authentication and Token Exchange Clarity developed marketplace token exchange method which enables one click connection flows for integrations that exist as part of a marketplace.