TechTip: Setting up Microsoft Entra ID for synchronization with the EPLAN CloudEplan Cloud
Status: 28. August 2024

TechTip: Setting up Microsoft Entra ID forsynchronization with the EPLAN CloudPreconditions•To synchronize Microsoft Entra ID groups, you need the P1 licenses for yourMicrosoft Entra ID.

•You have an EPLAN Cloud company organization.

•You have access to the user management in your EPLAN Cloud company organization.
Read more•In the EPLAN Cloud, create a personal access token (PAT) for your companyorganization and select the "User management" product. Read more

Setting up a company application
1.

Create a company application with a name of your choice in Microsoft Entra ID. EPLAN
recommends the name "EPLAN ProvisioningService".
You can connect to more than one EPLAN Cloud company organization by creating
further company applications with different names.

2.

In the settings of Microsoft Entra ID, allow other applications that are not located in thegallery of Microsoft Entra ID.

3.

Set your company application to the automatic provisioning mode.
Provide the following information:oTenant URL: https://api.eplan.com/organization-scim/v1.0o"Secret token": EPLAN Cloud personal access token (PAT). Read more

4.

Test the connection and save the details.

5.

Set up users and groups for the scope of synchronization with your EPLAN Cloudcompany organization.

1

TechTip: Setting up Microsoft Entra ID for synchronization with the EPLAN Cloud
Eplan Cloud
Status: 28. August 2024

Editing the user assignment in Microsoft Entra ID(Provisioning Azure Active Directory users)
1.

Change the following attributes:

Mapping type

DirectSource attributes

objectId

Default value if null

<empty>Target attributeexternalId

Match objects using this attribute

Yes

Matching precedence

2Apply this mappingAlways

2.

Save your changes.

You do not have to make further changes.

Synchronization
Important:•A value must be specified for the display name in Microsoft Entra ID.

•The data transfer is limited to the initial provision. This means that no data of a user istransferred to the EPLAN Cloud during a further synchronization.

The following data are synchronized with the EPLAN Cloud:First nameLast name
User
Display name
UPNGroups

Group name2TechTip: Setting up Microsoft Entra ID for synchronization with the EPLAN Cloud
Eplan Cloud
Status: 28. August 2024

Notes on synchronization•During synchronization, the group name in Microsoft Entra ID becomes the team name inthe EPLAN Cloud user management.

•The team name and the short form are created automatically and cannot be changed
manually in the EPLAN Cloud user management.

•The description of the Microsoft Entra ID group is not synchronized in the EPLAN Clouduser management and remains empty. The description cannot be edited manually in theuser management.

•If a user or group is removed from Microsoft Entra ID or a user or group is removed fromthe scope of synchronization, the same users or group are removed from theEPLAN Cloud.

Changes in the EPLAN Cloud user management•Administrators of the EPLAN Cloud user management are notified about synchronization,such as about the addition of users or the creation of teams. These notifications areremoved after 72 hours.

•Users or teams that are managed in Microsoft Entra ID can only be edited or deleted inMicrosoft Entra ID.

•Users or teams that are managed in Microsoft Entra ID are marked with the icon
EPLAN Cloud user management.

in theSynchronization of the users in the EPLAN Cloud
The procedure described applies both to users who are part of the scope of synchronization
at the beginning and to users who are added to the scope of synchronization later.
•Users who are already signed in to the EPLAN Cloud with your Microsoft account aredetected automatically and will be synchronized with Microsoft Entra ID in the future.

•After the synchronization, users who are not yet signed in to the EPLAN Cloud with their
Microsoft account receive an invitation to the EPLAN Cloud via e-mail. If the user clicks
the invitation link and follows the instructions, they sign in completely to the EPLAN Cloudand become a member of the company organization.

3