Note
Hyperproof connects to many third-party systems that frequently change, including the system interface. Contact your System Administrator or the third-party provider for assistance meeting the requirements to integrate with Hyperproof and collect the proof you need.
Prerequisite: A Premium Entra ID subscription (P1 or P2) is required for this Hypersync to work.
When you create a Hypersync between Hyperproof and Microsoft Entra ID , you can automatically collect proof. The Hypersync for Microsoft Entra ID supports the following proof types:
Assigned Licenses
Group Memberships
List of Role Assignments
Lists of Groups
Lists of Users
Last Password Change Update
Password Protection
Note
You only need to connect Hyperproof to the app once, and then you can create as many Hypersyncs as you need. Additionally, you can create multiple Hypersyncs for a single control or label.
The Microsoft Entra ID Hypersync uses the Microsoft Graph API to retrieve information about users and groups in a Microsoft Entra ID instance. Users of the Hypersync authorize access to their Microsoft Entra ID instance using the OAuth interactive authorization code flow as described in this article.
The Hypersync uses the
Directory.AccessAsUser.Allscope, which grants the Hypersync access to all the directory information accessible by the authorizing user.It also uses the
AuditLog.Read.Allscope, which grants the Hypersync read access to all audit log data accessible by the authorizing user.Use the main
Microsoft.Resourcesreader attribute to add the required reader permissions to the service account.
The Microsoft Entra ID Hypersync currently only retrieves user and group information from Microsoft Entra ID. One of the APIs used by the Microsoft Entra ID Hypersync can be found in this article.