Versions Compared

Old Version 5

changes.mady.by.user Mollie Aspley

Saved on

compared with

New Version Current

changes.mady.by.user Mollie Aspley

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

By connecting your Azure AD account to Learn Amp:

  • All of your users that are stored in Azure AD will automatically be synced in to Learn Amp You can specify the users you require to be synced from Azure AD to Learn Amp, via a Group within Active Directory.

  • New users added to your this Azure AD account group will automatically be added to Learn Amp.

  • Any changes to user details in Azure AD (Job Title, Department, etc.) will be reflected in Learn Amp.

  • You can choose when new users are invited to Learn Amp.

...

Information that can be synced

Our ‘Out of the box’ integration with Learn Amp is able to map information from a number of predefined standard mappable fields which have been detailed in the table below:

Field in Azure AD

Field in Learn Amp

id

n/a

accountenabled

n/a

givenname

first_name

surname

last_name

preferredLanguage

language

officeLocation

location

department

department 

jobTitle

job_title

userPrincipalName

email

department

primary_team_name

photo

avatar

directReports

managers/line managers

override manager

employeeHireDate (only if populated in AD)

hire date

Info

Department maps to department in a user profilebut also to the primary_team_name.

...

Syncing Additional Information

Yes, It is possible to sync additional or different data points from Azure AD in to Learn Amp. For example, You may decide to sync employeeId into a Learn Amp custom field to assign unique identifiers to your users.

...

Known Limitations/ Considerations

Team Managers: The Azure AD integration will sync each individual users' manager into Learn Amp if the data is available to do so (directreports field in Azure AD). This is what is known as an Override Manager in Learn Amp. The Integration does not have the ability sync Team/Department managers in to into Learn Amp. However, Team managers can be configured within Learn Amp to work in conjunction with Override Managers. Your Implementation Coach can provide further details on this.

...

Expand
titleGroupMember.Read.All -

This scope is only used if MS Teams integration is enabled

This scope is users to check whether a given user is a member of the specified group. We do NOT fetch user details to any user who is not within the specified security group.

Expand
titleOnlineMeetings.Read -

This scope is only used if MS Teams integration is enabled

This scope is used to fetch attendance of a specific MS Teams meeting that correspond to an Event on the Learn Amp platform.

Expand
titleOnlineMeetings.Read.All -

This scope is only used if MS Teams integration is enabled

This scope is used to fetch messing details of any MS Teams meetings that correspond to an Event on the Learn Amp platform.

Expand
titleOnlineMeetings.ReadWrite -

This scope is only used if MS Teams integration is enabled

This scope is used to schedule an MS Teams meeting and retrieve the URL link, to store with an Event on Learn Amp.

Expand
titleOnlineMeetings.ReadWrite.All -

This scope is only used if MS Teams integration is enabled

This scope is used to schedule an MS Teams meeting and retrieve the URL link, to store with an Event on Learn Amp.

Expand
titleRead and write connector configurations -

This scope is only used if MS Teams integration is enabled

This scope is used to setup a Notification channel into MS Teams.

...

Required Stakeholders

To set up our Integration with Azure AD, you will need somebody with administrator level access to your Azure AD account. This person will also need administrator level access to your Learn Amp Live account for the period of time in which the Integration is being set up.

...

Other Frequently Asked Questions

Expand
titleWhat authentication protocol does Learn Amp's integration with Azure AD use?

Learn Amp’s integration uses the Microsoft Graph API. It does not use SCIM or SAML.

Yes
Expand
titleCan I choose which group of users in Azure AD are synced with Learn Amp
?

You can sync users from a single tenant and group in Azure AD. We recommend creating a Learn Amp group in your Azure AD tenant. This should be a group that contains the users they’d like to have access to the Learn amp platform, whoever is in this group will by synced over to the Learn amp platform and users who aren’t wont. Anyone who is removed from this group at any point will be deactivated.

...

Expand
titleDoes the Azure AD integration sync team managers?

Azure AD won’t sync team managers but can translate line management relationships using override managers in Learn Amp. When setting up the Azure AD integration, tick the box. ‘Assign override managers/Direct reports in Azure AD’.

Expand
titleHow does Azure AD sync a user's primary and secondary team?

AzureAD syncs users into Primary Teams (i.e. from Department in Azure AD). This will override any manual changes to primary team membership in Learn Amp.

Azure AD does not sync users to Secondary Teams. Users can be assigned to Secondary Teams in Learn Amp. The Azure AD integration will not override secondary team membership.

AzureAD does NOT delete any teams. Teams can be deleted in Learn Amp.

No, user provisioning uses Graph API
Expand
titleDoes Azure AD integration with Learn Amp use SCIM?
sync a user's timezone?

Timezone is not a standard mappable field in the Azure AD integration with Learn Amp. The default company timezone can be set in Learn Amp’s Company Settings. All individuals can set their own timezones in user profile settings.

It is possible to sync additional or different data points from Azure AD in to Learn Amp. These requests will require custom development work to be undertaken by our technical team. The time taken to complete this work is chargeable.

Expand
titleWhat information from Azure AD is stored within Learn Amp to setup the integration?

Tenant ID

We store the tenant ID of your AzureAD.
This is stored in an encrypted field (not in plain text) within our production database.
The tenant ID is not kept in any file or other shareable/downloadable format.

Security Group Object ID

We must store the Object ID of the Security Group within AzureAD, which defines which users should be created/updated/deactivated automatically by the integration.

This object ID is stored in plain text within the primary database.

Expand
titleCan we use Azure AD for single sign on (SSO)?

Yes. Learn Amp can also integrate with Azure AD to permit Single Sign On. This uses the OAuth2 protocol against your Azure AD tenant. Users are authenticated by the UserPrincipalName field in Azure AD. For full information, please see our integration page on Azure Active Directory Integration for Single Sign On.

Expand
titleCan we use this integration without MS Teams?

Yes. You can integrate Learn Amp with Azure AD for user provisioning without enabling the MS Teams integration for events and activity feeds.

Expand
titleIs it possible to skip 'manager' field?

Yes. You can uncheck the option: ‘Assign override manager using Manager/Direct Reports in AzureAD’ while managing settings on AzureAD.

Expand
titleDoes this integration support the mapping of extended attributes to Learn Amp?

Yes - please speak to our support team about custom mappings between Azure Active Directory and Learn Amp.