Skip to main content
Connect Microsoft Entra ID to give Porcia organization-wide visibility into enterprise applications, users, groups, sign-in activity, delegated access, and supported vendor signals. You can start this setup during onboarding or later from Settings → Integrations. If you signed up with Microsoft, Microsoft Entra is the provider shown first during onboarding; signing up with Microsoft alone does not grant Porcia access to your organization.

​
Before you start

  • You are a Microsoft Global Administrator.
  • Your organization uses a Microsoft Entra tenant.
  • You can review and approve an administrator-consent request.
  • Allow approximately 5–10 minutes for setup, plus any provider synchronization time.
If you are not a Global Administrator, use the Invite your IT admin option where available or share this guide with the administrator who can approve the connection.

​
Connect Microsoft Entra ID

1

Start the Microsoft Entra connection

In onboarding or Settings → Integrations, choose Connect Microsoft Entra ID. Porcia prepares an administrator-consent request for the organization.
2

Review the requested access

Microsoft displays the Porcia permissions and the organization that will receive access. Review the request with your security or identity team.
3

Grant administrator consent

Sign in with a Microsoft Global Administrator account and approve the request if it matches your organization’s policy.
4

Return to Porcia and verify

Return to Porcia and choose Verify and continue. Porcia confirms the connection and begins the initial synchronization.
If you skip setup during onboarding, return to Settings → Integrations at any time.

​
Microsoft permissions and purposes

The connection requests Microsoft Graph access in the following categories. Availability of activity and usage data can depend on tenant licensing and provider reporting settings. These permissions help Porcia connect people, groups, applications, sign-ins, delegated access, and relevant vendor signals. The exact data available depends on your tenant, licensing, provider settings, and workspace configuration.

​
What Porcia can show

Enterprise applications

Applications and service context available from your Entra tenant.

Users and groups

Organizational context for understanding who has access to which applications.

Sign-in activity

Authentication activity where the tenant makes the relevant reports available.

OAuth access

Delegated access and application-permission context for risk review.

Vendor signals

Relevant mailbox signals such as invoices, renewals, signups, and permission notices.

​
What Porcia does not do through baseline discovery

  • It does not send email from connected customer mailboxes.
  • It does not create users or applications as part of discovery.
  • It does not change assignments or tenant configuration automatically.
  • It does not require employees to connect their individual Outlook accounts.
Any supported administrative action requires the relevant permission and an explicit confirmation in the product.

​
Troubleshooting

Only a Microsoft Global Administrator can approve the organization-wide consent request. If you are not one, invite or contact the appropriate administrator and share this guide.

​
The connection cannot be verified

  • Confirm that consent was granted in the intended Microsoft Entra tenant.
  • Confirm that the administrator account has the required role.
  • Return to Porcia and run verification again after the consent flow completes.
  • If the provider reports a tenant or permission error, contact [email protected] with the safe error message. Do not send secrets or private tenant data.

​
No applications or activity appear yet

Initial synchronization is asynchronous and may take longer for larger tenants. Tenant licensing, report availability, and provider settings can limit activity detail even when the connection is healthy.

​
Disconnect Microsoft Entra ID

  1. Go to Settings → Integrations.
  2. Open the Microsoft Entra connection and choose Disconnect.
  3. Remove Porcia’s authorization from your Microsoft Entra administrator controls if you want to revoke provider access completely.
Disconnecting stops new synchronization. Historical application data follows your workspace’s supported data-management process.

​
Next steps

Google Workspace

Connect another organization provider.

OAuth Grants

Review delegated third-party access.

Browser Extension

Add browser usage context.

Findings

Review security and access concerns.