Skip to main content

User data import

In order to set up user data import, the application registration for the previously created enterprise application needs to be updated.

The exact import semantics (which users to import, which attributes to copy into the

The fallback content to display on prerendering
database) are agreed separately.

Prerequisites (provided by Datafisher):

  1. (none)

Results (to be provided to Datafisher):

  1. Application (client) ID
  2. Directory (tenant) ID
  3. Secret ID
  4. Secret Value
  5. User group Object Id (optional)

Assign permissions​

First,

  1. find the application from the enterprise applications list,
  2. under Security → Permissions, click on the application registration link to go to the application registration.

img

Alternatively, you can find the application registration from Applications → App registrations and open the Manage → API permissions page.

Next, click on the Add a permission button.

img

Next, select the Microsoft Graph API.

img

Next,

  1. select Application permissions as the type,
  2. search for user.read.all,
  3. tick the User.Read.All permission,
  4. click Add permissions.

img

Next, in the Configured permissions list click Grant admin consent for $company.

img

Next, click Yes in the popup that appears.

img

The client secret​

Next, you need to create credentials for the application by going to Manage → Certificates & Secrets and clicking New client secret.

img

Next,

  1. add LMS as the Description,
  2. select the maximum expiration time as Expires (currently 24 months),
  3. press Add.

img

Next, send the Secret ID and Value to Datafisher. The Value is sensitive information.

img

Application and Directory IDs​

Finally, open the Overview section and send the Application (client) ID and Directory (tenant) ID to Datafisher. This is not secret information.

img

User groups​

Sometimes only certain users need to be imported. The filtering may be done on Datafisher side based on user attributes (e.g. only fetch users from Finland, or only users that are not marked as system accounts), but it is also possible to manage the inclusion or exclusion by using user groups.

In order to do this, you need to provide Datafisher with the Object Id of the relevant user group(s).

img