Importing entities from Azure AD - Card Synchronization 3.2

You can import cardholders, cardholder groups, and credentials from Security Center SaaS edition by connecting to Azure Active Directory (AD) and importing the entities into Security Center using the Card Synchronization plugin. After the import, changes made in the Azure AD data source can be synchronized in Security Center.

1. From the Config Tool home page, open the Plugins task.
2. In the Plugins task, select the Card Synchronization plugin role from the entity browser, and click the Properties tab.
3. In the Data sources section, click Add data source ().
   The Data source configuration window opens.
4. From the Data source type list, select Azure Active Directory, and then click Next.
   
5. Enter the following information to connect to the Azure AD app, and then click Next:

   Tenant name

   Enter the name of the Azure AD tenant where the Azure AD app is registered.

   Client ID

   Enter the Application (client) ID of the Azure AD app that contains the cardholders and credentials that you want to import.

   App key

   Enter the client secret key for the Azure AD app. The key was generated when the app was registered.

   

   NOTE: If the secret key is no longer available, you must delete the existing app, create a new app to get a new secret key.
6. Choose the user groups to import:

   Filter groups

   Set to ON if you only want to import certain cardholder groups, and then select the groups you want to import.

   NOTE: When set to OFF, all cardholder groups are imported.

   
7. Select the entity types to import and synchronize with Security Center, and then click Next.

   Cardholders

   Imports the cardholders from the external data source into Security Center.

   Cardholder groups

   Imports the cardholder groups from the external data source into Security Center. Important: This does not put cardholders into their respective cardholder groups.

   Cardholder group memberships

   Synchronizes the relationship of cardholders and cardholder groups from the external data source. Important: This option assigns imported cardholders to cardholder groups. If this option is not selected, imported cardholders are not linked to cardholder groups.

   Credentials

   Imports the credentials from the data source into Security Center.

   
8. Map each external field to a Security Center field by selecting the column name from the corresponding drop-down list.
   For an explanation of the external fields, refer to the following topics:

   • Cardholders schema.
   • Cardholder groups schema.
   • Cardholder group members schema.
   • Credentials schema.
   • Custom fields schema.
   
9. (Optional) Choose one or more fields to be global keys.
10. (Optional) If the external data contains terms that you want to replace, do the following:
    1. Click Find and replace text using regular expressions ().
    2. Enter the text to find and replace.
       For example, you could look for variations of a country name and replace them with a country code, or replace a native card format name by a supported card format alias.
    3. If necessary, change the order using the up and down arrows.
       The transform expressions are processed in the order specified in the Add transform expressions for field dialog.
    1. Click Save.
    

    Tip: If required, you can select the row of any expressions that you no longer require, and click delete .
    A script icon () is shown in the Sample value column when the field text is being replaced by a regular expression.
11. If there are external field without a corresponding Security Center field, you can create new custom fields and associate them now: Click Manage custom fields, fill the form, and then click Save.
    

    NOTE: To map an external field that is, turn on the Display all external fields option.
12. Click Next.
13. In the Data source name field, enter a name for the data source, and then click Finish.
14. Click Apply.