Loading
Upcoming Mandatory Changes to Public Key Infrastructure (PKI)Read More
Salesforce Enforces New Security Requirements in Summer 2026Read More
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Synchronize User Data from Microsoft Entra ID to Salesforce

            You are here:

            1. Salesforce Help
            2. Docs
            3. Agentforce IT Service

            Synchronize User Data from Microsoft Entra ID to Salesforce

            Synchronize employee information from directory providers such as Azure AD with Salesforce to keep employee records current. Employee Sync uses a unique identifier mapping between Azure AD and Salesforce to determine whether to create a new employee record or update an existing one during each sync cycle. The sync job runs automatically on the configured schedule, either at the default time or with a customer-defined CRON expression, and syncs new users and profile changes from Azure AD. This automation helps ensure Salesforce reflects employee lifecycle changes, including when employees join, change roles, or leave.

            Required Editions

            Available in: Lightning Experience
            Available in: Enterprise, Performance, and Unlimited Editions with Agentforce IT Service and HR Service.

            Example:

            Example
            Example

            Anaya, an IT administrator at Pinnacle Financial Group, manages user access for service teams in Salesforce. The company uses Microsoft Entra ID as the source of truth for employee lifecycle events.

            Northern Trail Outfitters enables scheduled user synchronization from Microsoft Entra ID to Salesforce for customer community plus (CCP) and unified employee license (UEL) users. The sync job runs every 2 hours and doesn't require flow connectors or additional connector licensing.

            During a weekly org update, these changes occur in Microsoft Entra ID:

            • New hires added to the Support Operations group
            • Role changes for several existing analysts
            • Departed employees removed from the directory

            After the next scheduled run, Salesforce applies the same lifecycle updates:

            • Creates corresponding Salesforce users for new Microsoft Entra ID users, including CCP/UEL setup
            • Updates existing Salesforce users when Microsoft Entra ID attributes change
            • Deactivates or removes user access based on Microsoft Entra ID deletion events, while preserving historical record ownership references for past incidents and transactions

            By using scheduled synchronization, field mapping, and consolidated admin reporting, Pinnacle Financial Group keeps user access accurate without manual provisioning and maintains data persistence for historical records.

             
            Loading
            Salesforce Help | Article