Adding attribute data: How to integrate with Azure Active Directory (M365)

Administrators can add user attribute data (e.g. department, city, etc.) automatically by connecting the SWOOP miner to Azure Active Directory. These steps need to be carried out by the O365 Administrator:

Important: These steps require you to create an Azure app registration.  This can be avoided by a simpler process by using the SWOOP Analytics Azure app and the steps for that can be found here.

Step-by-step guide

Note:  If you need help please open a support ticket at https://support.swoopanalytics.com/hc/en-us/requests/new.

From the main Azure dashboard (https://portal.azure.com):

1. Click on the 'Azure Active Directory' link on the main menu 
2. Click on 'App registrations'
3. Click on '+ New application registration' (at the top).
4. Fill in the form entering your miner URL for the 'Sign-on URL' (e.g. https://miner-[yoursite].swoopanalytics.com):
   and click on 'Register' (at the bottom of the page).
5. On the new page you will see the 'Application (client) ID'.  You will need this below.
6. Click on 'API Permissions' under the 'Manage' heading on the next screen.
   Note: Do not delete existing User.Read permission which is added by default.
7. Click '+ Add a permission'.
8. Click 'Microsoft Graph' (the large box at the top).
9. Click 'Application Permissions'.
10. Find 'User' at the bottom then add permission 'User.Read.All' and click 'Add permissions'.
11. Click on 'Grant admin consent for (directory name)'.
12. Click on 'Certificates and Secrets' and add a new client secret (you will need this below).
    Note: You need the 'Value' (not the Secret ID).

13. Once the application is created, go to the manifest on the left hand side and find the "publisherDomain" and record this for use below.
    

Your "API Permissions should now look like this:

SWOOP Miner Setup

In the SWOOP data miner do the following: 

1. 'Graph API' should be selected next to 'Azure Active Directory Integration'
2. Copy the 'Application ID' and key value from Azure to the 'Client ID' and 'Client Secret' on the miner.
3. Copy the publisherDomain value from Azure (see step 13 above) to the 'Domain' on the miner.
4. Press 'Save Changes/Login'.

Your miner page should look something like this if the operation is successful: 

Now select the fields from that you would like to share with SWOOP.

How it works

The SWOOP data miner retrieves data from Azure AD and combines it with the sanitised data. The email field is hashed and is therefore not passed to the SWOOP Analytics Engine.