Adding attribute data: How to integrate with Azure Active Directory (Workplace)

Administrators can add user attribute data (e.g. department, city, etc.) automatically by connecting the SWOOP miner to Azure Active Directory. These steps need to be carried by the O365 Administrator:

Important: These steps require you to create an Azure app registration.  This can be avoided by a simpler process by using the SWOOP Analytics Azure app and the steps for that can be found here.

Step-by-step guide

Note: This is a new instruction - please reach support at https://support.swoopanalytics.com/hc/en-us/requests/new if you find any errors or have any suggestions.

From the main Azure dashboard (https://portal.azure.com):

1. Click on the 'Azure Active Directory' link on the main menu 
2. Click on 'App registrations'
3. Click on '+ New application registration' (at the top).
4. Fill in the form entering your miner URL for the 'Sign-on URL' (e.g. https://miner-[yoursite].swoopanalytics.com):
   and click on 'Register' (at the bottom of the page).
5. On the new page you will see the 'Application (client) ID'.  You will need this below.
6. Click on 'API Permissions' under the 'Manage' heading on the next screen.
7. Click '+ Add a permission'
8. Click 'Microsoft Graph' (the large box at the top)
9. Click 'Application Permissions'
10. Find 'User' at the bottom then add permission 'User.Read.All' and click 'Add permissions'
11. Click on 'Grant admin consent for (directory name)'
12. Click on 'Certificates and Secrets' and add a new client secret (you will need this below)

SWOOP Miner Setup

In the SWOOP data miner, now do the following: 

1. Tick 'Enabled' next to 'Azure Active Directory Integration'
2. Copy the 'Application ID' and key value from Azure to the 'Client ID' and 'Client Secret' on the miner.
3. Press 'Save Changes/Login'

Your miner page should look something like this if the operation is successful: 

Now select the fields from that you would like to share with SWOOP.

How it works

The SWOOP data miner retrieves data from Azure AD and combines it with the sanitised data from Workplace.  The email field is hashed, and is therefore not passed to the SWOOP Analytics Engine.