Adding attribute data: How to integrate with Azure Active Directory (Microsoft Teams)

Administrators can add user attribute data (e.g. department, city, etc.) automatically by connecting the SWOOP miner to Azure Active Directory. These steps need to be carried out by the O365 Administrator:

Step-by-step guide

Note:  If you need help please raise support ticket at https://support.swoopanalytics.com/hc/en-us/requests/new.

From the main Azure dashboard (https://portal.azure.com):

1. Click on the 'Azure Active Directory' link on the main menu 
2. Click on 'App registrations'
3. Click on '+ New application registration' (at the top).
4. Fill in the form entering your miner URL for the 'Sign-on URL' (e.g. https://miner-[yoursite].swoopanalytics.com):
   and click on 'Register' (at the bottom of the page).
5. On the new page you will see the 'Application (client) ID'.  You will need this below.
6. Click on 'API Permissions' under the 'Manage' heading on the next screen.
7. Click '+ Add a permission'.
8. Click 'Microsoft Graph' (the large box at the top).
9. Click 'Application Permissions'.
10. Find 'User' at the bottom then add permission 'User.Read.All' and click 'Add permissions'.
11. Click on 'Grant admin consent for (directory name)'.
12. Click on 'Certificates and Secrets' and add a new client secret (you will need this below).

13. Once the application is created, go to the manifest on the left hand side and find the "publisherDomain" and record this for use below.

SWOOP Miner Setup

In the SWOOP data miner do the following: 

1. 'Graph API' should be selected next to 'Azure Active Directory Integration'
2. Copy the 'Application ID' and key value from Azure to the 'Client ID' and 'Client Secret' on the miner.
3. Copy the publisherDomain value from Azure (see step 13 above) to the 'Domain' on the miner.
4. Press 'Save Changes/Login'.

Your miner page should look something like this if the operation is successful: 

Now select the fields from that you would like to share with SWOOP.

How it works

The SWOOP data miner retrieves data from Azure AD and combines it with the sanitised data from Teams. The email field is hashed and is therefore not passed to the SWOOP Analytics Engine.