Set Up Active Directory Integration

Azure Active Directory® (Azure AD) is Microsoft’s cloud-based identity and access management service, and can be configured to integrate with Tracker. Azure AD customers use their existing company-issued identities to manage user access and identity in Tracker. Users can continue to use their existing onboarding process and tool to create and deactivate users. User identity attributes (including name, address, phone number, email address) in Tracker are synchronized from Active Directory. If you use Office 365 or other Microsoft cloud applications you are already managing users in a compatible Azure Active Directory tenant.
Azure AD supports a number of single sign-on and integration solutions. See Microsoft's Active Directory documentation for detailed information about Azure Active Directory.
Accessing Tracker using Azure AD is available only for company users. Tracker’s start page redirects users to their company- managed sign-in page, so that all company users are authenticated by the company systems before they access Tracker. You can require users to be prompted to sign in to Tracker.

Azure AD Company Support Contact

If you integrate Azure AD with Tracker you must provide a support contact email alias. This is the email address that will display on the footer of Tracker pages when the feature is enabled. It is also the address where important system messages will be sent, including:
  • Provisioning system digest emails
  • Provisioning system errors
  • Health subsystem digests
Companies using the Active Directory Integration feature must ensure that emails sent to this address are acted upon by company users to ensure Tracker performs as expected.

Enable Azure Active Directory Integration

Tracker must be granted read-only access to the company’s Azure Active Directory tenant. Next, you must configure the integration in Tracker settings.
  1. Select
    Settings
    in the left navigation.
  2. In the
    Integrations
    section, select
    Active Directory Integration Setup
    .
  3. The Company-owned domains section shows any of your company's domains that are currently set up. To add a domain, click
    Add domain
    and enter the domain name in the
    Domain
    field.
  4. In the
    Send Authorization Request
    section, next to
    Contact
    email, type the email address of the company's system administrator (not the Tracker System Administrator). This is the person who administers your company's Azure AD tenant and grants Tracker access your Azure AD software. Click
    Send request
    .
When the integration is complete, the Active Directory Integration page shows your Azure Active Directory Tenant ID number and the date when the Provisioning system was last run.
Prompt Azure Active Directory Users to Sign in to Tracker
Once Azure AD is integrated with Tracker, you can require users to be prompted to sign in.
  1. Select
    Settings
    in the left navigation.
  2. In the
    Integrations
    section, select
    Active Directory Integration Setup
    .
  3. Check the
    Prompt for Tracker sign in
    checkbox.

Related content