Microsoft Entra ID integrations

Microsoft Entra ID integrations

→

AFAS Profit → Microsoft Entra ID

Connect AFAS with Microsoft Entra ID

→

Nmbrs → Microsoft Entra ID

Nmbrs to Entra ID integration: Microsoft accounts from the payroll records

→

HR2day → Microsoft Entra ID

HR2day to Entra ID integration: Microsoft 365 accounts for care, education and childcare

→

Visma YouServe → Microsoft Entra ID

YouServe to Entra ID integration: Microsoft accounts per employer and office

→

Workday → Microsoft Entra ID

Workday to Entra ID integration: Microsoft accounts for the Netherlands from global HR

→

Visma Raet YouForce → Microsoft Entra ID

YouForce to Entra ID integration: Microsoft accounts and managers from Visma Raet

Systems you can connect Microsoft Entra ID with

How KoppelHet connects to Microsoft Entra ID

Microsoft Graph API for users, managers, groups and licences.

Authentication: App registration met client credentials en alleen de benodigde Graph-rechten, zoals User.ReadWrite.All en LicenseAssignment.ReadWrite.All

Objects we connect

• Users with attributes such as department, job title and employeeId
• Manager relationships
• Groups and group membership
• Licences

What a Microsoft Entra ID integration does

• AFAS Profit, Visma Raet YouForce, HiBob, Workday → to Microsoft Entra ID

  Account and licence from the HR system

  A new employee in AFAS, YouForce, HiBob or Workday becomes an Entra ID user with department, job title and employeeId. The integration sets usageLocation to the country of employment, so the Microsoft 365 licence can be assigned.

  AFAS Profit → Microsoft Entra ID integrationVisma Raet YouForce → Microsoft Entra ID integrationHiBob → Microsoft Entra ID integrationWorkday → Microsoft Entra ID integrationIdentity and access management

• AFAS Profit, Nmbrs, Personio → to Microsoft Entra ID

  Manager and groups on an internal move

  When department or manager changes in HR, the integration updates the manager relationship and group membership in Entra ID on the effective date.

  AFAS Profit → Microsoft Entra ID integrationNmbrs → Microsoft Entra ID integrationPersonio → Microsoft Entra ID integrationIdentity and access management

• Microsoft Entra ID → to ESIS, Simplicate

  Entra ID as the source for users in business apps

  Users and groups in Entra ID decide who gets an account in ESIS and other applications without their own HR integration.

  Microsoft Entra ID → ESIS integrationMicrosoft Entra ID → Simplicate integrationAccounts in applications

• AFAS Profit, Visma Raet YouForce, Workday → to Microsoft Entra ID

  Blocking after the last working day

  An end date in HR blocks the Entra ID account after the last working day and removes licences later, as agreed with IT.

  AFAS Profit → Microsoft Entra ID integrationVisma Raet YouForce → Microsoft Entra ID integrationWorkday → Microsoft Entra ID integrationIdentity and access management

What to watch for

• In a hybrid environment, on-premises Active Directory is the source for synced accounts. We then write to AD and Entra Connect syncs on to Entra ID.
• Assigning a licence only works when usageLocation is set. We set it from the country of employment.

In your IT landscape

• Runs as a managed integration on the KoppelHet platform, next to your existing integration layer. No VPN into your network.
• Only the fields in the design you approve are transferred. The platform keeps no register of its own.
• Tested first in the test or acceptance environment where there is one. You choose the go-live moment.
• ISO 27001 certified, hosted in Amsterdam. When the contract ends you receive the configuration and the audit logs.

Implementation, architecture and compliance

Processes with this system

• Identity and access management
• Accounts in applications

Topics that involve Microsoft Entra ID

• Joiners, movers and leavers
• Offboarding
• Contractors and temporary access
• Roles and RBAC
• Segregation of duties (SoD)
• Access review and audit log
• Microsoft Entra ID
• SCIM and SCIM Gateway
• NIS2 and the Dutch Cyber Security Act
• IAM in education
• IAM in government
• IAM in healthcare
• CRM users and licences
• Project administration and hours
• Collaboration and password management
• Industry applications in construction and education

Customer cases

DAEL Groep

Installation engineering

AFAS is the source for Active Directory and Entra ID. Accounts, email addresses and groups are created, updated and deactivated automatically based on HR changes.

“Thanks to KoppelHet's user comparison between the HR system and our AD, we quickly saw where AFAS and Microsoft differed.”

Read the customer story

Tabijn

Education

Tabijn uses HR2Day as the source for Entra ID, and Entra ID as the source for ESIS. New staff get an account automatically, leavers are deactivated, and in ESIS everyone gets access to the schools where they work.

Read the customer story

Articles about Microsoft Entra ID

• Connecting 4PS Construct and ESIS to Entra ID: rights and leavers
• Cleaning up CRM licences of leavers in Salesforce and HubSpot