Skip to content
Security and identity

Connect Azure Active Directory to any app with two-way sync.

Two-way sync Azure Active Directory across all your CRMs, databases, data warehouses, EDI systems, and AI tools, with custom workflows tailored to your data.

  • SOC 2 and 6 other compliance frameworks
  • POC with real engineers in minutes

Adopted by fast-scaling companies moving mission-critical data in real time

Case study
Migrated from MuleSoft
Case study
Migrated from Celigo
Migrated from Heroku Connect
Migrated from Matillion
Case study
Migrated from Fivetran
Case study
Migrated from Celigo
Object catalog

What Stacksync syncs in Azure Active Directory.

These objects sync between Azure Active Directory and any connected system, with field-level mapping and conflict resolution. Custom fields are picked up from the live schema where Azure Active Directory exposes them.

Users
/users in Microsoft Graph; synced two-way — profile attributes, accountEnabled, and assignedLicenses are read out while provisioning writes (create, update, disable, delete) are pushed back.
Groups
/groups covering security and Microsoft 365 groups; created, updated, and deleted through Graph, and read into warehouses for entitlement reporting.
Group memberships
member and owner relationships on /groups/{id}/members; added and removed via the $ref endpoint and tracked for changes with delta query on $select=members.
Applications
app registrations under /applications; usually read into a database or CMDB for app ownership and credential-expiry tracking.
Service principals
/servicePrincipals (enterprise apps) plus appRoleAssignments; read for app inventory and access-posture reporting.
Directory roles
/directoryRoles and roleManagement assignments; read for privileged-access reviews, with role-assignment writes where the granted scopes permit.
Devices
/devices registered or joined to the tenant; typically read-only into asset and security databases.
API surface

How Stacksync connects to Azure Active Directory.

The connector runs on Azure Active Directory's native API. Stacksync manages authentication, rate limits, retries, and schema changes so your team does not maintain integration code.

Connection
Microsoft Graph REST API (v1.0)
Authentication
OAuth 2.0 via the Microsoft identity platform using an Entra ID app registration; app-only (client credentials) or delegated flows, with directory scopes such as User.ReadWrite.All and Group.ReadWrite.All requiring tenant admin consent
Change detection
Microsoft Graph delta query (deltaLink tokens returning only changed users and groups, with @removed deletions) paired with change-notification webhook subscriptions for near-real-time push
Rate limits
Resource-unit throttling: roughly 8,000 ResourceUnits per 10 seconds per app for reads on tenants over 500 users, writes near 3,000 requests per 2.5 minutes; 429 responses include a Retry-After header

Sync directions

  • Read Supported
  • Write Supported
  • Change data capture Not available
  • Webhooks Supported
What ships with Azure Active Directory

Connect Azure Active Directory for flexible, real-time data sync.

Real-time sync, workflow automation, event queues, EDI, and monitoring, for every connection.

Real-time

Two-way sync

Changes in Azure Active Directory instantly reflect across connected systems. No stale data, no manual imports.

No-code + pro-code

Workflow automation

Trigger automated workflows whenever Azure Active Directory data changes, update records, fire webhooks, or kick off sequences without brittle API scripts.

At scale

Event queues

Handle millions of events per minute without losing a single Azure Active Directory record.

Observability

Monitoring

Track your Azure Active Directory sync health, view errors, and replay failed events in one click.

Trading partners

EDI

Transform legacy EDI complexity into simple database interactions.

Use cases

What teams run on the Azure Active Directory connector.

Microsoft Entra ID (formerly Azure Active Directory) is the cloud identity and access system of record for most Microsoft-centric enterprises, owned by IT and identity and security teams. It masters Users, Groups, app registrations, and role assignments that gate access to Microsoft 365, Azure, and thousands of SAML and SCIM apps. Because employment and access data live here, HR systems, IGA tools, and security data lakes all need to read directory state and write provisioning changes back to it.

  • Identity and access management (IAM) engineers
  • Directory / Entra ID administrators
  • Security engineers
  • IT operations
  • Platform / DevOps engineers

  1. Provision and deprovision Entra ID Users and Group memberships from an HR system of record so account enablement follows employment status.

  2. Sync manager, department, and jobTitle from an HRIS back onto Entra ID User attributes to keep dynamic groups and Conditional Access accurate.

  3. Replicate Groups and their Members into a Postgres warehouse for access reviews and entitlement reporting.

  4. Mirror Applications and Service principals into a database or CMDB to track app ownership and credential expiry.

  5. Reconcile Entra ID Users and assignedLicenses with an ITSM or finance database to audit license allocation and reclaim unused seats.

  6. Two-way sync of Entra ID Users and Group memberships with an HR system of record so new hires, role changes, and terminations flip accountEnabled and group access automatically instead of through manual ticket queues.

All Azure Active Directory integrations

Pick the system you need to keep in sync with Azure Active Directory. Each page covers the sync setup, field mapping, and common workflows for that pair.

CRM · 41

ERP · 37

Database · 50

Data warehouse · 28

Business productivity · 37

Accounting and finance · 17

How it works

Set up Azure Active Directory in minutes, without APIs.

Configure and sync within minutes, no code. Whether you sync 50k or 100M+ records, Stacksync handles the queues, infra, and plumbing. Integrations are non-invasive and need zero setup on your systems.

  1. 01

    Connect your apps

    Authenticate Azure Active Directory with its native method — OAuth, API keys, or service accounts — plus secure options like SSH tunneling, IP whitelisting, and VPC peering.

    • OAuth 2.0
    • SSH tunnel
    • VPC peering
    Azure Active Directory connected
    OAuth 2.0
    SSH tunnel
    SSL certificate
    VPC peering
  2. 02

    Choose tables

    Pick the Azure Active Directory objects to sync — Stacksync auto-detects the schema, including custom fields where the platform exposes them. Sync to existing tables, or let Stacksync create new ones with ideal data types.

    • Standard objects
    • Custom objects
    • Auto-schema
    objects · Azure Active Directory
    Customers 12,480
    Sales Orders 8,213
    Invoices 5,902
    Items 1,344
  3. 03

    Map fields

    Fields map automatically even when names and types differ. Stacksync handles transformation and type casting for you, zero configuration required.

    • Auto-map
    • Type casting
    • Transforms
    Azure Active Directory database
    Company company_name text
    Email email text
    Amount amount numeric
    Created created_at timestamp
Try interactive demo

FAQ

Azure Active Directory connector FAQ

What can I sync with the Azure Active Directory connector?

Azure Active Directory's core objects — Users, Groups, Group memberships, Applications and custom fields — can sync with any of 302 other systems. Every integration is real-time and bidirectional, with field-level mapping and conflict resolution.

How does Stacksync connect to Azure Active Directory?

Via Microsoft Graph REST API (v1.0), authenticated with OAuth 2.0 via the Microsoft identity platform using an Entra ID app registration; app-only (client credentials) or delegated flows, with directory scopes such as User.ReadWrite.All and Group.ReadWrite.All requiring tenant admin consent. Changes are detected as follows — microsoft Graph delta query (deltaLink tokens returning only changed users and groups, with @removed deletions) paired with change-notification webhook subscriptions for near-real-time push. Stacksync manages rate limits, retries, and schema changes automatically.

Is the Azure Active Directory connector two-way?

Yes. Changes made in Azure Active Directory propagate to the connected system and vice versa, in milliseconds. One-way flows are also supported when a direction should stay read-only.

How long does an Azure Active Directory integration take to set up?

Most Azure Active Directory integrations go live in minutes: authenticate Azure Active Directory and the other system, pick objects and fields, and enable the sync. No code and no infrastructure to manage.

Is Azure Active Directory data secure in transit?

Stacksync is SOC 2 Type II, ISO 27001, GDPR and HIPAA compliant. Azure Active Directory data is encrypted in transit, and a zero-persistent-storage architecture means records are not retained after a sync operation.

SECURITY

Security teams trust Stacksync

As a data company, we understand the importance of keeping your data secure. Stacksync is built with security best practices to keep your data safe at every layer, and is DPF-certified for US, EU, UK and CH data transfers.

Learn more about security
SOC 2 Type II
ISO 27001
HIPAA BAA
GDPR
CCPA
DPF US-EU-UK-CH
→ SECURITY WITH BENEFITS

SSO & SCIM

Let your users access Stacksync from your centralized user management systems. Works with Okta, Azure, Google SSO and more.

Alerts

Immediately get alerted about record syncing issues over email, Slack, PagerDuty and WhatsApp. Resolve issues from a centralized dashboard with retry and revert options.

Secure connection options

Securely connects to your systems with:

OAuth 2 SSH Tunnelling SSL certificates IP Whitelisting VPN gateway VPC peering and more
Coworkers laughing in front of a laptop in a casual office setting

Your last integration took months.
Your next one takes a prompt.

Book a demo Tour the platform on your own