Pre-provisioning Azure AD users with the Entra Sync app
By default, when you set up Azure AD SSO, users are created in Focus the first time they log in (just-in-time provisioning), and their Focus role is set from the SAML role claim on every login.
The Entra Sync app is an optional add-on that pre-loads your Azure users into Focus before their first login, so you can:
- Assign users to Focus groups for content access control
- Configure user settings ahead of time
- Have users visible in the Focus admin screens before they start using the platform
Roles are still set via the SAML role claim on each login. To control which Focus role users get, configure App Roles as described in Configure user roles in the main Azure AD setup guide.
If you use different tenants for recorded people (Subscribers) and logged in users, this is also supported — please make sure you let your onboarding team know that this is required during setup.
How it works
Once authorized, the Entra Sync app reads your users from Azure and syncs them into Focus every 30 minutes. Users will appear in the Focus People screen and can be assigned to groups, given permissions, and configured before their first login.
Setup
To enable the Entra Sync app, you must authorize it to read your users.
As part of the Teams onboarding flow this can be automatically enabled. If you are not using Teams recording or want to enable this post onboarding, please ask your support team to provide a link to the application for authorization.