HowTo: How to Add Users via M365 (Entra ID)

Adding users to CyberHoot’s Autopilot Platform via M365/ Entra ID Sync.

If your company uses M365 / Entra ID, you can use it as a simple and effective way to manage users within CyberHoot. Follow the steps below:

Step-by-Step Instructions:

1- Upon login, you will find yourself on the Dashboard screen. Click on “Users” on the top of the screen.

2- Click on the “Entra ID” button.

3- Click on “Grant Entra ID Access”.

4- Click on  either “Public Cloud Access” if entering a regular business account or “Government Cloud Access” if your environment is hosted on the Gov cloud.

5- Enter the Entra ID credentials.

6- Click on Next.

7- This will put you on Sync Settings, from there you can exclude unlicensed and/or external users from synchronization.  (Note: Some companies choose to train unlicensed users as well as external consultants or subcontractors.)

At this point you will also select if you are going to sync the Entra ID managers or Assign all sync’d users to a local manager.

Hit “Save Sync Settings” to continue.

8- You must choose between two options:  (1) Sync by Groups, or  (2) Sync by Users.

9- Under the “Action” Column, users show as “Skipped” or “Syncd“. Click either word to switch users between “Skipped” or “Syncd”.

9- Click “Sync Now” to synchronize users manually.  Users auto-sync every 4 hours.

10- Click on Close and click on Users on top of the screen

What are the permissions used by CyberHoot to access Azure AD/Entra ID? Does CyberHoot store my password?

Permission Authorization flow:

 Step 1- Permission and Consent: Administrator logs into Microsoft and CyberHoot is assigned read-only permissions using the principle of least privilege, assigning the permissions listed below.

Step 2 – Token Acquisition: CyberHoot requests an OAuth 2.0 token from Azure AD / Entra ID. Note that CyberHoot will not know nor store the password used by the admin.

Step 3 – Token Grant: Azure AD / Entra ID validates the request and, if successful, issues an access token. This token encapsulates the permissions granted to CyberHoot.

Step 4 – Accessing Resources with the Token: CyberHoot uses this token to access the information on the table above. This information is used to add users to CyberHoot.

Secure your business with CyberHoot Today!!!

Sign Up Now