Azure Active Directory User Provisioning Integration

Integration Summary
Our integration with Azure Active Directory creates a connection between the two platforms that automatically syncs user information stored in Azure AD to Learn Amp. This eliminates the need to import or regularly maintain user information in Learn Amp.

Main Features

By connecting your Azure AD account to Learn Amp:

You can specify the users you require to be synced from Azure AD to Learn Amp, via a Group within Active Directory.
New users added to this Azure AD group will automatically be added to Learn Amp.
Any changes to user details in Azure AD (Job Title, Department, etc.) will be reflected in Learn Amp.
You can choose when new users are invited to Learn Amp.

Information that can be synced

Our ‘Out of the box’ integration with Learn Amp is able to map information from a number of predefined standard mappable fields which have been detailed in the table below:

Field in Azure AD	Field in Learn Amp

Field in Azure AD	Field in Learn Amp
id	n/a
accountenabled	n/a
givenname	first_name
surname	last_name
preferredLanguage	language
officeLocation	location
department	department
jobTitle	job_title
userPrincipalName	email
department	primary_team_name
photo	avatar
directReports	override manager
employeeHireDate (only if populated in AD)	hire date

Department maps to department in a user profile but also to the primary_team_name.

Syncing Additional Information

Yes, It is possible to sync additional or different data points from Azure AD in to Learn Amp. For example, You may decide to sync employeeId into a Learn Amp custom field to assign unique identifiers to your users.

Please Note: These requests will be handled by your Implementation Coach and will require custom development work to be undertaken by our technical team. The time taken to complete this work is chargeable or can be deducted from your Implementation budget at your Coaches' discretion.

Known Limitations/ Considerations

Team Managers: The Azure AD integration will sync each individual users' manager into Learn Amp if the data is available to do so (directreports field in Azure AD). This is what is known as an Override Manager in Learn Amp. The Integration does not have the ability sync Team/Department managers into Learn Amp. However, Team managers can be configured within Learn Amp to work in conjunction with Override Managers. Your Implementation Coach can provide further details on this.

Team Hierarchy: Azure AD will create a team for each of the individual departments that are stored in your Azure AD account. These will be presented as a flat structure in your Learn Amp account and will not consider any parent/child relationships between your departments.

However, once you have completed your initial sync, you will be able to easily create parent/child relationships with your teams in Learn Amp which will be saved moving forward. Your Implementation Coach can provide further details on this.

How the Platforms Connect

Learn Amp connects to Azure AD using the Graph API. You will be asked to provide your Azure AD Tenant ID and Group ID then authorize the integration with Learn Amp. You will perform an initial sync with Azure AD to create new user profiles in Learn Amp. When a change to user information is made in Azure AD, changes will then be synced automatically to Learn Amp.

Permissions/Scopes Required

For our integration with Azure AD to work effectively, the following permissions scopes are requested from Learn Amp:

This scope is required to subscribe to change notifications: When any user within the specified group is either added/removed/details changed, we receive a webhook notification, to that we can handle the change accordingly.

This scope is required to fetch group details of any sub-groups, beneath the specified group. Some customers for example, choose to structure their AzureAD groups, so that there are sub-groups that have access to Learn Amp.

This scope is used to fetch user details, so Learn Amp users can be automatically created/updated/deactivated.

This scope is used to fetch user details, so Learn Amp users can be automatically created/updated/deactivated

This scope is only used if MS Teams integration is enabled.

Required Stakeholders

To set up our Integration with Azure AD, you will need somebody with administrator level access to your Azure AD account. This person will also need administrator level access to your Learn Amp Live account for the period of time in which the Integration is being set up.

Set up Instructions

Full instructions on how to set up the Azure AD integration can be found within your Learn Amp account. Please go to yourdomain.learnamp.com/en/integrations/azure_ad

Other Frequently Asked Questions