Sync Azure Groups

[Sparky Bear]

This is becoming more and more painful as time goes on,
It would be almost a godsend to restrict azure syncing to a specific security group, especially with large clients and even franchisees where they use office 365 for email and identity but we are not allowed to setup sso as it is not group restricted to the branch we cover.

 

[VoIPTools]

We have a tool for on-prem Active Directory (3CX Active Directory Sync). This tool allows you to specify the specific OUs to synchronize and can create 3CX groups that mirror AD departments, and adds people to the appropriate groups. It is a 2-way synchronization. Microsoft provides libraries for interacting with AD. I have not looked into how we could expand the capabilities of our tool to work with either on-prem or Azure, but I suspect the capabilities are similar. It's on our development schedule, but our backlog of requests is VERY large.

 

[Gbot@Okam]

i tried to implement this by restricting the APP via a ApplicationAccessPolicy but it does not seems to work... i'm still able to see all the M365 accounts..
https://learn.microsoft.com/en-us/a...soft-graph-permissions-to-only-access-specifi

It should exist a way to scope what the 3cx APP is allowed to access in Azure no ??

 

[SB2021]

+1 for azure group sync. Don't want to sync all accounts, dont want to constantly manually add individuals to sync or not sync.....

 

[SweetAction]

Related Idea
https://www.3cx.com/community/threads/office-365-integration.66066/

 

[Vinnied]

Yes its "In Consideration" for 3 years.... still waiting for the Groupsync option, so we can create a dynamic group in Office365 to add users in 3CX.

Really need this option.

 

[VoIPTools]

Our 3CX Active Directory Sync tool can do this currently with on-prem Active Directory. We could extend this application to do the same thing with Azure/Office365. It would require some funding, but we can do it.

Our current tool allows you to select which Organizational Units you want to sync. We can create new users found in AD that are not in 3CX and delete/disable extensions in 3CX that are not found in AD. In addition to simply creating user extensions, it can also create extension groups, and assign newly created users to the groups based on what we find in AD.

 

[nicojmb2]

I've the opposite, some users not appear for "SingIn" selection but in "ContactSing" or "CalendarSing" they do appear

Do you know what the requirements are for them to appear?

 

[Sparky Bear]

I've the opposite, some users not appear for "SingIn" selection but in "ContactSing" or "CalendarSing" they do appear

Do you know what the requirements are for them to appear?

they need a first and/or last name in office 365 (not just display name)

 

[nicojmb2]

they need a first and/or last name in office 365 (not just display name)

You are awesome, this was the problem.