{"id":108968,"date":"2022-12-27T15:53:38","date_gmt":"2022-12-27T14:53:38","guid":{"rendered":"https:\/\/www.avanet.com\/kb\/add-sophos-central-azure-ad\/"},"modified":"2023-08-23T15:26:20","modified_gmt":"2023-08-23T14:26:20","slug":"add-sophos-central-azure-ad","status":"publish","type":"kb","link":"https:\/\/www.avanet.com\/en\/kb\/add-sophos-central-azure-ad\/","title":{"rendered":"Add Sophos Central Azure AD"},"content":{"rendered":"\n

This tutorial explains how to synchronize an Azure AD with Sophos Central so that it can work with users or groups.<\/p>\n\n

What is Microsoft Azure AD?<\/strong>

Microsoft Azure Active Directory (Azure AD) is a cloud-based identity and access management solution from Microsoft.\nIt provides organizations with a platform to manage user identities and access permissions for various resources, including cloud applications, on-premises applications, and networks.
Azure AD provides comprehensive security features such as single sign-on (SSO), two-factor authentication (2FA), and risk checks to help organizations improve IT security and meet compliance requirements.\nIt is integrated with the Azure cloud platform and provides a set of tools and features to manage user identities and access permissions for organizations of all sizes. <\/p> <\/div> <\/div>\n\n

There is already a tutorial in the Sophos KB that explains this procedure, but a few more steps or high resolution screenshots will help if you are doing this for the first time.\nSophos KB: Set up directory service<\/a> <\/p>\n\n

First you log in to Sophos Central<\/a> and go to the Global Settings > Directory service.<\/p>\n\n

\n
\"Sophos<\/figure>\n\n\n\n
\"Sophos<\/figure>\n<\/figure>\n\n

You now log in to the Azure Portal<\/a>.<\/p>\n\n

After that, you add a new Enterprise Application<\/strong>.<\/p>\n\n

\n
\"Azure<\/a><\/figure>\n\n\n\n
\"Azure<\/a><\/figure>\n\n\n\n
\"Azure<\/a><\/figure>\n\n\n\n
\"Azure<\/a><\/figure>\n<\/figure>\n\n

After adding this enterprise application, register the application and add appropriate API permissions<\/strong>.\nSophos Central requires the following permissions to read the users and groups.\nMicrosoft Graph API permissions. <\/p>\n\n

Select Delegated permissions<\/strong> and add the following entries…:<\/p>\n\n