Workshop's integration allows Active Directory customers to sync all users and distribution lists into Workshop, making sending to existing Active Directory users extremely easy.
Before you begin
This integration creates an Enterprise Application in Microsoft Entra ID (Azure AD). During the initial connection, a Global Administrator may be required to approve the Workshop sync application's requested permissions.
We recommend completing setup using a dedicated Workshop service account with a read-only role, such as Global Reader, following least-privilege best practices. Global Administrator access is only needed during the initial consent step and does not need to remain connected after setup.
The Enterprise Application uses a client credential authentication flow to generate authentication tokens for Microsoft Graph API requests. Because authentication is handled through this application flow rather than user login, the service account should be exempt from password rotation or expiration policies to avoid disrupting the integration.
Connect Azure Active Directory to Workshop
Follow the steps below to connect your Azure Active Directory and begin syncing users to Workshop.
Log in to Workshop and navigate to the Apps page.
Locate and select the app titled Azure Active Directory Sync
Under Manage, click Add App.
-
Sign in using your Microsoft Entra ID (Azure Active Directory) credentials to grant Workshop read-only access to your directory.
For more details about the Microsoft Graph API calls used for this integration, please reference this article.
After the connection is established, activate at least one list in Workshop to populate your directory.
This initial process can take upwards of 1 hour to complete. For more information on managing synced lists, please reference this article. We typically recommend creating an “All Employees” list for this purpose.
Once the sync completes, your integration setup is finished. 🎉
Sync Additional Active Directory Attributes
By default, Workshop syncs the following fields:
First Name
Last Name
Email
Workshop can sync any user profile attribute, as well as any extension attributes. If you would like to sync additional attributes, provide Workshop Support, your onboarding team, or your account manager with a list of the additional Active Directory attributes you would like to sync.