> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.laposta.org/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.laposta.org/_mcp/server.

# Connecting Microsoft Entra to Laposta

> With this integration, you can import email addresses, first names and last names from Microsoft Entra into your account.

Microsoft Entra is Microsoft's platform for identity and access management: it controls who can log in and what that person is given access to. Its best-known application is Entra ID, the successor to Azure Active Directory, which organisations use to manage single sign-on, MFA, access policies and more.

With this connection, you can import not only email addresses, but also the first and last names of people in Entra into your Laposta account.

## Costs of the connection

The connection has a one-off set-up fee of 295 euros and an annual fee of 395 euros, both excluding VAT. The connection is only available in combination with a subscription.

For more information, please contact the [helpdesk](mailto:helpdesk@laposta.nl).

## Setting up the connection

Log in to Microsoft Entra at [entra.microsoft.com](https://entra.microsoft.com/).

#### Register a new app

![The home page of the Microsoft Entra admin center after logging in](/_fern-files/_img/6492efca918b9abf7da3b72073cab04a44b31feced43b24c50a9acda94feccef.webp)

On the left-hand side, click ‘App registrations’ and then ‘New registration’.

![The App registrations page with the New registration button](/_fern-files/_img/76befe0b7d9ed40a75dc095bda333de6fabc30857467cad4ff909e86d5c087ec.webp)

#### Name the application

Give the application a name and click ‘Register’.

![The Register an application form with the application name and the Register button](/_fern-files/_img/fe9924cf172aaf271929415d2ab77ce4b1301a1db9a51380d010589908d15222.webp)

#### Add API permissions

The application will now open. Go to ‘API permissions’ and click ‘Add a permission’ to add ‘User.ReadBasic.All’.

Entra automatically sets up ‘User.Read’ for every new registration. That permission reads the profile of a logged-in user and plays no role in this connection, as the connection works without a logged-in user. Leave it in place.

![The API permissions page with the Add a permission link above the configured permissions](/_fern-files/_img/d4ecf5ab46bd48847b8d7675cdb4fa603f2f95f1c311db1ae80e1e08fba691af.webp)

In the pop-up, select ‘Microsoft Graph’ and then ‘Application permissions’. Type ‘User.ReadBasic’ in the search bar and tick ‘User.ReadBasic.All’.

![The Request API permissions popup with Application permissions selected and User.ReadBasic.All ticked](/_fern-files/_img/c52479f3bb2df801a01c5bc2fee7721dbad53930faedcc60e6dde2c658dd8d8b.webp)

> **Note**
>
> Does the connection fail to show any users and display a message about insufficient permissions? If so, add ‘User.Read.All’ in the same way. According to Microsoft, this application permission is required for retrieving users.

#### Create a secret

For authentication, go to ‘Certificates & secrets’ and click ‘New client secret’.

![The Certificates & secrets page with the New client secret link](/_fern-files/_img/1443bc996aa12c161d69e42a472f9e14805e2189c87c3454789b798517f7b237.webp)

Enter a description and select how long the secret should remain valid.

![The Add a client secret window with a description and the validity period of the secret](/_fern-files/_img/e58ebc6ee4b9907ef3efa0d928c41aa5e0c9773c80c6285d29ab12a2cc499af8.webp)

#### Save the secret

Click ‘Add’.

> **Warning**
>
> The created secret is only shown once. Copy the ‘Value’ immediately and store it in a safe place.

![The created client secret in the Client secrets list, with the copy icon next to the Value](/_fern-files/_img/9fc2104d9d3aaa8091fa68f79a238cde19fa84e8d5bbfa50a275e23a42076792.webp)

#### Find the Application ID

Go to ‘Overview’ and copy the ‘Application ID’ there.

![The Application ID under Overview](/_fern-files/_img/16d917e34381dcc37668ad2873848e84cf52421d2657a80e82be531b08d0c0f7.webp)

#### Find the Tenant ID

Finally, copy the ‘Tenant ID’.

![The Tenant ID in Microsoft Entra](/_fern-files/_img/a7add6cd69fdefb63a2fd9cb2095a7ecd504d6438c29572eb2186fff183569b4.webp)

#### Send the details to Laposta

Send these three details (the Tenant ID, the Application ID and the created secret) to Laposta.

> **Warning**
>
> Do not send these details by email. The helpdesk has secure methods available for this.

## Related articles

#### [What is Single Sign-On (SSO)?](/single-sign-on-sso)

How to activate Single Sign-On on a paid subscription and link the users to your…

#### [Connecting AFAS Profit to Laposta](/handleiding-koppeling-afas)

Automatically synchronise employee data from AFAS Profit to a list in your account.

#### [Connecting Magister to Laposta](/koppel-magister-aan-laposta)

Synchronise pupil and parent details per class from Magister, and read how to request…

#### [Connecting Somtoday to Laposta](/koppel-somtoday-aan-laposta)

Connect Somtoday to Laposta to automatically place pupil and guardian details into…