--- title: Azure AD Integration Setup Process description: This guide walks through the steps to automatically import employees from Azure Active Directory into ALICE database. --- [Skip to content](https://kb.alicereceptionist.com/documents/azure-ad-integration-setup-process#main-content) English Show submenu for translations [More support](https://kb.alicereceptionist.com/documents/kb-tickets/new?hsLang=en) [![ALICE Logo](https://kb.alicereceptionist.com/hs-fs/hubfs/AMV_ALICELOGO.png?width=200&height=93&name=AMV_ALICELOGO.png)](https://kb.alicereceptionist.com/documents?hsLang=en) - [Submit A Helpdesk Ticket](https://share.hsforms.com/1HZ-ebsN3TzWAiEUV7bCVgwrei6t) - [Tickets Listing Page](https://support.alicereceptionist.com/tickets-view?offset=0) - [Knowledgebase](https://kb.alicereceptionist.com/) - [Documentation Portal](https://kb.alicereceptionist.com/documents) - [Sign Out](https://support.alicereceptionist.com/_hcms/mem/logout) Open main navigation Close main navigation - [Submit A Helpdesk Ticket](https://share.hsforms.com/1HZ-ebsN3TzWAiEUV7bCVgwrei6t) - [Tickets Listing Page](https://support.alicereceptionist.com/tickets-view?offset=0) - [Knowledgebase](https://kb.alicereceptionist.com/) - [Documentation Portal](https://kb.alicereceptionist.com/documents) - [Sign Out](https://support.alicereceptionist.com/_hcms/mem/logout) - English Show submenu for translations - [More support](https://kb.alicereceptionist.com/documents/kb-tickets/new) - Contact us Contact us How can we help you? - There are no suggestions because the search field is empty. 1. [ALICE Receptionist Documentation Portal](https://kb.alicereceptionist.com/documents?hsLang=en) 2. [User Guides & Administrative Resources](https://kb.alicereceptionist.com/documents/user-guides-administrative-resources?hsLang=en) 3. [3rd Party Integrations](https://kb.alicereceptionist.com/documents/user-guides-administrative-resources?hsLang=en#3rd-party-integrations) # Azure AD Integration Setup Process ## This guide walks through the steps to automatically import employees from Azure Active Directory into ALICE database. Azure Active Directory (Azure AD) can be integrated with ALICE Receptionist to import employees from Active Directory into ALICE Receptionist's database. This removes the need to manually create, update, or delete Employee listings on ALICE directly. ### Creating the ALICE Azure AD Sync Application 1. Navigate to the "Enterprise Applications" section and click **+ New Application. ![Enterprise Applications New Application](https://kb.alicereceptionist.com/hs-fs/hubfs/Enterprise%20Applications%20New%20Application.png?width=400&height=147&name=Enterprise%20Applications%20New%20Application.png)** 2. Click on the **+ Create your own application** option at the top of the screen. ![Browse Azure AD Gallery](https://kb.alicereceptionist.com/hs-fs/hubfs/Browse%20Azure%20AD%20Gallery.png?width=300&height=112&name=Browse%20Azure%20AD%20Gallery.png) 3. On the "Create your own application screen," give the app a name. Choose “Register an application to integrate with Azure AD (App you’re developing)" and click the **Create** button. ![Create your own application Azure AD](https://kb.alicereceptionist.com/hs-fs/hubfs/Create%20your%20own%20application%20Azure%20AD.png?width=400&height=262&name=Create%20your%20own%20application%20Azure%20AD.png) 4. On the "Register an application" screen, select the account type to give this application access. Most customers will choose the first option for single tenants. Click the **Register** button to create the application. ![Register an Application](https://kb.alicereceptionist.com/hs-fs/hubfs/Register%20an%20Application.png?width=600&height=353&name=Register%20an%20Application.png) 5. A notification appears showing that the app was successfully created. ![Create Application Azure AD Notification](https://kb.alicereceptionist.com/hs-fs/hubfs/Create%20Application%20Azure%20AD%20Notification.png?width=300&height=60&name=Create%20Application%20Azure%20AD%20Notification.png) ### Configuring the Azure AD Sync 1. In the "Enterprise Applications" section, search for the created application and select it. ![Enterprise Applications Alice AD Sync](https://kb.alicereceptionist.com/hs-fs/hubfs/Enterprise%20Applications%20Alice%20AD%20Sync.png?width=500&height=294&name=Enterprise%20Applications%20Alice%20AD%20Sync.png) 2. In the "Overview" section of the application, copy and store the Application ID. This ID will be needed on the ALICE Azure AD Sync configuration screen. ![ALICE AD Overview](https://kb.alicereceptionist.com/hs-fs/hubfs/ALICE%20AD%20Overview.png?width=500&height=328&name=ALICE%20AD%20Overview.png) 3. Under the Manage section, click on **Properties**. On this screen, switch the "Visible to user?" option to **Yes**, then click the **Save** button. ![ALICE AD Sync Properties](https://kb.alicereceptionist.com/hs-fs/hubfs/ALICE%20AD%20Sync%20Properties.png?width=500&height=394&name=ALICE%20AD%20Sync%20Properties.png) 4. Under the "Security" section, click on the **Permissions** option. Select the **Grant admin consent for (app name)** button on this screen. Provide your credentials and click **Accept** when prompted. ![ALICE AD Sync Permissions](https://kb.alicereceptionist.com/hs-fs/hubfs/ALICE%20AD%20Sync%20Permissions.png?width=500&height=207&name=ALICE%20AD%20Sync%20Permissions.png) 5. Return to the **Properties** menu under "Manage." Select the **application registration** hyperlink. ![AD Sync Application Registration](https://kb.alicereceptionist.com/hs-fs/hubfs/AD%20Sync%20Application%20Registration.png?width=500&height=385&name=AD%20Sync%20Application%20Registration.png) 6. Click on the **Certificates & Secrets** menu under "Manage." Click on **Client secrets** to open the tab and click **+ New client secret. ![ALICE AD Sync Certifications](https://kb.alicereceptionist.com/hs-fs/hubfs/ALICE%20AD%20Sync%20Certifications.png?width=500&height=331&name=ALICE%20AD%20Sync%20Certifications.png)** 7. Give the secret a description and select a time frame for the "Expires" field in the drop-down menu's available options. When finished, click **Add**. ![Add a Client Secret](https://kb.alicereceptionist.com/hs-fs/hubfs/Add%20a%20Client%20Secret.png?width=500&height=287&name=Add%20a%20Client%20Secret.png) 8. Use the **Copy** button to copy the value in the "VALUE" column (do not copy the "Secret ID"). This value will be needed on the ALICE Azure AD Sync configuration screen later. ![ALICE AD Sync Certificates and Secrets](https://kb.alicereceptionist.com/hs-fs/hubfs/ALICE%20AD%20Sync%20Certificates%20and%20Secrets.png?width=670&height=258&name=ALICE%20AD%20Sync%20Certificates%20and%20Secrets.png) 9. Click on the **API Permissions** tab under "Manage." Then, click the **+ Add a Permission** button. ![ALICE AD Sync API Permissions](https://kb.alicereceptionist.com/hs-fs/hubfs/ALICE%20AD%20Sync%20API%20Permissions.png?width=670&height=275&name=ALICE%20AD%20Sync%20API%20Permissions.png) 10. Select the **Microsoft Graph** API. ![Request API Permissions](https://kb.alicereceptionist.com/hs-fs/hubfs/Request%20API%20Permissions.png?width=500&height=247&name=Request%20API%20Permissions.png) 11. Select **Delegated permissions** on the "Request API Permissions" screen, then scroll down and find the “USER” group. Select the “User.Read” and “User.Read.All” permission. Click **Add Permission**. 12. Now select the following API / Permissions from the list. 1. OpenId Permissions - email 2. OpenId Permissions – Profile 3. Use Permissions – User.Read 13. Click the **Add Permissions** button at the bottom of the permission screen to add these three permissions. ![API Permissions Add Permission](https://kb.alicereceptionist.com/hs-fs/hubfs/API%20Permissions%20Add%20Permission.png?width=500&height=276&name=API%20Permissions%20Add%20Permission.png) 14. On the "API Permissions" screen, click the **+ Add a permission** button again. 15. Select the **Microsoft Graph** API again. ![Request API Permissions Application Permissions](https://kb.alicereceptionist.com/hs-fs/hubfs/Request%20API%20Permissions%20Application%20Permissions.png?width=500&height=163&name=Request%20API%20Permissions%20Application%20Permissions.png) 16. Click on **Application permission.** 17. Select the following API / Permissions from the list. 1. Directory– Directory.Read.All 2. Group – Group.Read.All 3. GroupMember – GroupMember.Read.All 4. Member – Member.Read.Hidden 5. User – User.ReadBasic.All 18. Click the **Add permission** button at the bottom of the screen. 19. Click the **Grant admin consent for (Tenant name)** to grant admin consent for these permissions. ![Configured Permissions](https://kb.alicereceptionist.com/hs-fs/hubfs/Configured%20Permissions.png?width=670&height=231&name=Configured%20Permissions.png) 20. The final list of API / Permissions should include those listed in the above image. ![API Permission Names](https://kb.alicereceptionist.com/hs-fs/hubfs/API%20Permission%20Names.png?width=670&height=212&name=API%20Permission%20Names.png) 21. Copy the"AD Tenant ID" from the **Overview** tab for your Azure AD Tenant. Store this ID as it will be required on the ALICE Azure AD Sync screen's configuration screen. ![API Permissions Name Example](https://kb.alicereceptionist.com/hs-fs/hubfs/API%20Permissions%20Name%20Example.png?width=670&height=326&name=API%20Permissions%20Name%20Example.png) ### Integrate ALICE Receptionist with ALICE Azure AD To complete the integration, an administrative user of the ALICE Portal will need the following information from the created app. - Application ID - Azure AD Tenant ID - Application Secret 1. Log into the ALICE Portal with an administrator account. Under **Account Management**, select **Global Settings**. 2. Select the **Azure Active Directory** tab. 3. Insert the Application ID, Azure AD Tenant ID, and Application Secret. Click **Save**. ![ALICE Portal Azure Active Directory Field](https://kb.alicereceptionist.com/hs-fs/hubfs/ALICE%20Portal%20Azure%20Active%20Directory%20Field.png?width=500&height=279&name=ALICE%20Portal%20Azure%20Active%20Directory%20Field.png) 4. The integration is complete. To set import employees or schedule imports, follow the Import Employee [Azure AD Admin](https://kb.alicereceptionist.com/documents/azure-ad-employee-import-process?hsLang=en) guide or **[training video](https://securestorage.alicereceptionist.com/media/Training/ConfigPortal/DirMgmt/ALICETrainingPortal-EmpImport-AD.mp4)**. 5. When importing employee information from Azure AD to the ALICE Receptionist database, the following mapping dictionary will define where data is pulled from in AD and what ALICE Receptionist fields will be populated from these fields. | **ALICE Database Field** | **Azure AD Field** | | --- | --- | | First Name | First Name | | Last Name | Last Name | | Employee Photo | Photo | | Primary Number | Business Phone | | Mobile Phone | Mobile Phone | | Email Address | Email | | Department | Department | | Position | Job Title | | User Name | User Principal Name | | User ID (Not visible or editable) | Object ID |   - [ALICE Receptionist Directory (ARD) Software](https://kb.alicereceptionist.com/documents/alice-receptionist-directory-ard-software?hsLang=en#main-content) - [Configuration Wizard](https://kb.alicereceptionist.com/documents/alice-receptionist-directory-ard-software?hsLang=en#configuration-wizard) - [ALICE Receptionist Client (ARC) Software](https://kb.alicereceptionist.com/documents/alice-receptionist-client-arc-software?hsLang=en#main-content) - [Configuration Wizard](https://kb.alicereceptionist.com/documents/alice-receptionist-client-arc-software?hsLang=en#configuration-wizard) - [ALICE Visitor Management (AVM) Software](https://kb.alicereceptionist.com/documents/alice-visitor-management-avm-software?hsLang=en#main-content) - [Visitor Check-in Flows](https://kb.alicereceptionist.com/documents/alice-visitor-management-avm-software?hsLang=en#visitor-check-in-flows) - [Scheduling Appointments](https://kb.alicereceptionist.com/documents/alice-visitor-management-avm-software?hsLang=en#scheduling-appointments) - [ALICE Mobile App](https://kb.alicereceptionist.com/documents/alice-mobile-app?hsLang=en#main-content) - [Getting Started](https://kb.alicereceptionist.com/documents/alice-mobile-app?hsLang=en#getting-started) - [Using the ALICE Mobile App](https://kb.alicereceptionist.com/documents/alice-mobile-app?hsLang=en#using-the-alice-mobile-app) - [User Guides & Administrative Resources](https://kb.alicereceptionist.com/documents/user-guides-administrative-resources?hsLang=en#main-content) - [3rd Party Integrations](https://kb.alicereceptionist.com/documents/user-guides-administrative-resources?hsLang=en#3rd-party-integrations) - [Network](https://kb.alicereceptionist.com/documents/user-guides-administrative-resources?hsLang=en#network) - [Employee Imports](https://kb.alicereceptionist.com/documents/user-guides-administrative-resources?hsLang=en#employee-imports) - [Hardware](https://kb.alicereceptionist.com/documents/user-guides-administrative-resources?hsLang=en#hardware) - [ALICE Portal – Getting Started](https://kb.alicereceptionist.com/documents/alice-portal-getting-started?hsLang=en) - [ALICE Portal – Welcome Section](https://kb.alicereceptionist.com/documents/alice-portal-welcome-section?hsLang=en) - [ALICE Portal – Dashboard](https://kb.alicereceptionist.com/documents/alice-portal-dashboard?hsLang=en) - [ALICE Portal – Account Management](https://kb.alicereceptionist.com/documents/alice-portal-account-management?hsLang=en) - [ALICE Portal – Directory Management](https://kb.alicereceptionist.com/documents/alice-portal-directory-management?hsLang=en#main-content) - [Import Jobs](https://kb.alicereceptionist.com/documents/alice-portal-directory-management?hsLang=en#import-jobs) - [Directories](https://kb.alicereceptionist.com/documents/alice-portal-directory-management?hsLang=en#directories) - [Reports](https://kb.alicereceptionist.com/documents/alice-portal-directory-management?hsLang=en#reports) - [ALICE Portal – Visitor Management](https://kb.alicereceptionist.com/documents/alice-portal-visitor-management?hsLang=en#main-content) - [Check-in Settings](https://kb.alicereceptionist.com/documents/alice-portal-visitor-management?hsLang=en#check-in-settings) - [Check-in Forms](https://kb.alicereceptionist.com/documents/alice-portal-visitor-management?hsLang=en#check-in-forms) - [Surveys](https://kb.alicereceptionist.com/documents/alice-portal-visitor-management?hsLang=en#surveys) - [Private Screening](https://kb.alicereceptionist.com/documents/alice-portal-visitor-management?hsLang=en#private-screening) - [Reports](https://kb.alicereceptionist.com/documents/alice-portal-visitor-management?hsLang=en#reports) - [Submit A Helpdesk Ticket](https://share.hsforms.com/1HZ-ebsN3TzWAiEUV7bCVgwrei6t) - [Tickets Listing Page](https://support.alicereceptionist.com/tickets-view?offset=0) - [Knowledgebase](https://kb.alicereceptionist.com/) - [Documentation Portal](https://kb.alicereceptionist.com/documents) - [Sign Out](https://support.alicereceptionist.com/_hcms/mem/logout) [![ALICE Receptionist Logo](https://kb.alicereceptionist.com/hs-fs/hubfs/ALICE-Receptionist2024.png?width=300&height=140&name=ALICE-Receptionist2024.png "ALICE Receptionist Logo")](https://www.alicereceptionist.com/) WinTech LLC d/b/a ALICE Receptionist 8010 W Sahara Ave., STE 160 Las Vegas, NV 89117 Phone: (702) 284-73775 [mailto:support@alicereceptionist.com](mailto:support@alicereceptionist.com) Copyright © 2025, WinTech LLC d/b/a ALICE Receptionist