How to Configure the Microsoft Entra ID User Directory

Last updated on 2024-10-25 04:08:19

The Barracuda SecureEdge Manager allows you to configure the Microsoft Entra ID user directory for your selected workspace. You can add multiple user directories of the same or different type for the workspace.

Note that if you want to use the DC Client for transparent authentication behind the Site device, make sure that the internal domain is set in the forwarded domains DNS settings indicating your local domain controller.

Configure Microsoft Entra ID

The user directory retrieves users and groups from multiple sources and syncs them into a selected Microsoft Entra ID tenant. Multiple user sources are available. The configuration steps required depend on the user directory you use. To add a Microsoft Entra ID user directory:

Go to https://se.barracudanetworks.com and log in with your existing Barracuda Cloud Control account.
In the left menu, click the Tenants/Workspaces icon and select the workspace you want to configure the Microsoft Entra ID user directory for.
Go to Identity > Settings.
The Settings page opens. In the User Directories section, click Add User Directory.
From the user directory drop-down menu, select Microsoft Entra ID.
The Add User Directory page opens. Specify the values for the following:
- Display Name – Create a display name to represent the user directory. For example, if you are connecting to Microsoft Entra ID, you might use something like 'EntraDir' or 'EntraID'.
- Tenant ID – Enter the tenant ID.
- Groups Included – Enter the group to be included. To add more groups, click +. Note: For the group filter to work, you must provide the exact group name.
Click Save.
In the User Directories table, a new Microsoft Entra ID user directory has been added. Under the fieldname STATUS, you will see the warning Authorization Needed.
Click Authorization Needed. Provide your admin Microsoft Entra ID credentials and click Sign in.
The Permission requested page opens. Click Accept.
In the User Directories table, you can see that the STATUS is shown as pending. The directory sync may take a few minutes.
After directory sync is completed, verify that in the User Directories table, under the fieldname STATUS, the text has changed to Completed with a green check mark.

In addition, information under the fieldname LAST SYNC displays the time the last sync occurred. The fieldname SYNC RESULT displays the number of users or groups already synced. Verify that you see all Microsoft Entra ID directory users and groups on the respective Identity > Users and Identity > Groups pages.

Edit Microsoft Entra ID

To edit the Microsoft Entra ID user directory:

In the left menu, click the Tenants/Workspaces icon and select the workspace you want to edit the Barracuda Cloud Control user directory for.
Go to Identity > Settings.
The Settings page opens. In the User Directories section, you can see that Microsoft Entra ID is displayed as your user directory.
To edit your Microsoft Entra ID account, click on the pencil icon.
The Edit User Directory page opens. Edit the value you are interested in. For example, you can modify values for the field names such as Display Name and Groups Included. Note: You cannot change the value for tenant ID because the option Tenant ID is disabled.
Click Save

Remove Microsoft Entra ID

To remove the Microsoft Entra ID user directory associated with your selected workspace:

In the left menu, click the Tenants/Workspaces icon and select the workspace you want to remove the Microsoft Entra ID user directory for.
Go to Identity > Settings.
The Settings page opens. In the User Directories section, you can see that the Microsoft Entra ID user directory is displayed.
To remove the existing Microsoft Entra ID user directory, click on the trash can icon.
The Delete User Directory <Name of Your User Directory> page opens.
Click Ok to confirm.

You can verify the following:

You can verify that the previous users/groups from the Microsoft Entra ID user directory are not shown on the Identity > Users and Identity > Groups pages.
For your selected workspace, you can now configure a new user directory of your choice. You can verify that that users/groups from this new user directory are available in the security policies drop-down menu and are shown on the respective Identity > Users and Identity > Groups pages.

Caution before deleting your existing user/group directory via the Identity > Settings tab: If you delete a directory and add a new one (or add the same directory again), all existing security and access policies regarding your user/group directory must be updated. Users who are already enrolled will still have access. Please use the Enrolled Users page to manage who should be deleted.

(Optional) Sync with Microsoft Entra ID

If you must sync the Microsoft Entra ID user directory quickly, proceed with the following steps:

On the Settings page, go to the User Directories section, and click the icon of three vertical dots to sync the user directory.
Click Sync.
The User Directory sync started pop-up windows opens.

You can see that the sync has fetched and updated the users and groups in the identity management associated with the Microsoft Entra ID user directory. Verify that you see all Microsoft Entra ID directory users and groups on the Identity > Users and Identity > Groups pages after successful sync.

Next Steps

How to Verify Identity Management Users or Groups