Entra ID and Active Directory
How does Joinly work in your Microsoft environment?
Joinly uses your HR system as the source and keeps accounts, groups and licences up to date in Microsoft Entra ID and in your own Active Directory, cloud-only or hybrid. Entra ID stays your identity provider and Joinly is the management layer on top. For Active Directory on site, the Joinly Agent runs in your own network, with outbound traffic only.
Microsoft Entra ID with JoinlyJoinly with Microsoft
What Joinly does in Entra ID and AD
A page for each environment.
- Microsoft Entra IDAccounts, groups and rights managed automatically, without separate actions in several Microsoft portals.
- Active Directory, including hybridThe Joinly Agent keeps accounts, groups and mailboxes up to date in your own Active Directory. Outbound traffic only, no VPN.
- SCIM gatewayOne standard for provisioning, as the link between HR, Entra ID and Active Directory and your applications.
Integrations
Connecting your HR system to Entra ID or AD
For each HR system, the connection with Microsoft Entra ID and with Active Directory.
Explained
Groups, hybrid and cleaning up
Articles on how Entra ID and Active Directory work, and what Joinly does in them.
- Active Directory or Entra IDThe role of Active Directory and when you move to Microsoft Entra ID.
- Security groups or Microsoft 365 groupsThe difference between the two kinds of groups.
- Entra ID groups for role-based accessHow you set up Entra ID groups for access by role.
- Dynamic groups on HR attributesGroups that fill themselves based on data from HR.
- AGDLP in a hybrid environmentHow AGDLP works in a hybrid Entra and AD environment.
- Cleaning up AD and Entra IDCleaning up Active Directory and Entra ID through Joinly.
Entra ID and Active Directory
Frequently asked questions about Entra ID and Active Directory
Does it work in a hybrid environment?
Yes. One HR source can feed your Microsoft Entra ID and your on-premises Active Directory at the same time, with both integrations running side by side.
Do I need to open ports for the Joinly Agent?
No. Every connection is opened from your own network. No inbound firewall rule, no VPN and no publicly reachable endpoint are needed.
How does Joinly get into Microsoft Entra ID?
Joinly delivers the changes as a SCIM 2.0 request to Entra ID's inbound provisioning. That is the route Microsoft itself offers for provisioning from an HR source.
What goes into a role?
Entra groups (security and Microsoft 365), Enterprise Applications with their app roles, Microsoft licences and applications such as Bitwarden or HubSpot. Whoever gets the role gets all of it at once, and loses it again when it is revoked, unless another source still covers the access.
See the connection at work yourself
In your free trial environment you see with demo data how a change in HR becomes an account in Entra ID.
No credit card, nothing to install.
Rather talk to someone first? Talk to an IAM specialist