Add User Account (AD User + AD 365 Sync – Microsoft 365 Federated)

Purpose

This guide outlines the steps to create new users in a setup where Practice Protect is integrated with Active Directory Connector, with on-premise Active Directory syncing to Microsoft 365, and Microsoft 365 federated with Practice Protect. If this does not suite your deployment please see below:

• Standard Cloud User Account (No Active Directory or Federation)
• Cloud User with Microsoft 365 Federation (No Active Directory)

Prerequisites

Before proceeding, ensure you have the following administrative access:

• Microsoft 365 Federation with Active Directory configured in Practice Protect.
• Administrator access to Practice Protect
• Administrator access to the Microsoft 365 Admin Center
• Administrator access to the on-premises Active Directory environment

Instructions

1. Log in to a Domain Controller or a server with the Active Directory Users and Computers (ADUC) console installed.
2. Open Active Directory Users and Computers.
3. Navigate to the Organizational Unit (OU) where the new user should be created.
4. Right-click the target OU, then select New > User.
5. Complete the required user details, then click Next.
6. Create and assign a password for the user. Configure any required password options (such as User must change password at next logon), then click Next.
7. Review the user information and click Finish. The user account will now be created in Active Directory.
8. From the server running the Microsoft Entra Connect (formerly Azure AD Connect) synchronization agent, run a manual directory synchronization to sync the newly created user to Microsoft 365. You can refer to the following guide
9. Log in to Practice Protect.
10. From the Access Space, click the 9-dot menu in the top-left corner and select Manage. This will take you to the Admin Portal.
11. In the left-hand menu, expand Inventory, then navigate to Identities > Roles.
12. Go to Members and click Add to include the newly created user.. This is to apply the integration and syncs the user to Microsoft 365

    Note: If your organization uses country restrictions or IP-based access controls, consider adding the user to the appropriate geolocation or network restriction role, such as AU User – Geolocking, to ensure the correct access policies are applied.

13. Locate the user by searching for their account, select the user from the results, then click Add
14. Click Save to assign them to the role.
15. Login to Microsoft 365 Admin Center and and navigate to Users > Active user. Confirm that the newly created user account appears in the list. Note: If the account does not appear, verify that Microsoft Entra Connect Sync is functioning correctly and that the synchronization cycle has completed successfully.
16. Assign the appropriate Microsoft 365 license to the user and wait for the mailbox provisioning process to complete. Test and confirm that the user can successfully sign in to Microsoft 365.
17. The user is now ready to be invited to Practice Protect. Refer to the following guide for instructions on sending the user invitation.
18. The user can now sign in to Practice Protect using their Active Directory User Principal Name (UPN) as their username and the password configured in Active Directory. Once authenticated, they can launch and access their assigned Microsoft 365 applications using the same credentials.