Skip to content
English
Go to qumulex.com
  • There are no suggestions because the search field is empty.

Does QxControl integrate with Microsoft Entra

Does QxControl integrate with Microsoft Entra?

Yes. A customer account in QxControl can require Single Sign-On (SSO) with Microsoft Entra as the sign-in provider. People and Groups can also be synchronized from Entra into QxControl. Roles and access credentials can optionally be synchronized as well.

For full setup instructions, see the Microsoft Entra Setup Guide : HERE

What it does

  • Single Sign-On: users sign in to QxControl with their Entra account. Password rules and multi-factor authentication are managed by your organization in Entra.
  • People and Groups sync: users and groups in your Entra tenant are created in QxControl, and group membership is kept up to date from Entra.
  • Optional Role, Credential and Group sync: using Entra custom security attributes, you can also sync each person’s QxControl Role, card numbers, and additional QxControl Groups.

How users sign in

  • Go to app.qumulex.io and enter your Entra User Principal Name in the email field, then click Next
  • If you’re already signed in to Entra, you go straight into QxControl. If not, you’ll be taken to the normal Entra sign-in page, including any 2FA your organization requires.
  • Each user accepts the End User Terms Agreement the first time they sign in

Who does what

  • Integrator: creates an Administrator user at the customer’s Place, using the customer’s Entra User Principal Name as the email. The integrator then selects Setup SSO from the Single Sign On menu at the customer’s Place.
  • Customer: signs in and grants QxControl permission in their Entra tenant. If they want to sync users and groups, they select Setup Sync and then Sync People and Groups from the Single Sign On menu at the top of their Place hierarchy. The sync must be set up by a user from the customer. The integrator cannot do it on their behalf.

Good to know

  • Synced People are created without a Role or credentials, so they can’t log in or open doors using the app until one is assigned, either in QxControl or through Entra attributes.
  • Synced People and Groups are created at the top Place of your hierarchy. You can move them lower as you build out your Places.
  • If a user is deleted in Entra, their QxControl Role is set to None, and their credentials are expired. Their record is kept for history.
  • If a group is deleted in Entra, it’s deleted from QxControl also, which may affect door access for its members.
  • Entra controls group membership for synced people. A group added by hand in QxControl will be removed on the next sync. To make it stick, set it in Entra.

Related articles