Prerequisites

• A Microsoft Entra ID subscription.
• A BenQ IAM administrator account. Please follow the normal steps to register a BenQ IAM admin account.

Configure Microsoft Entra (OAuth) SSO

Follow these steps to enable Microsoft Entra (OAuth) SSO in BenQ.

1. Login BenQ IAM with BenQ admin account, click SSO Setting in the Account Management section.

2. Select Microsoft Entra (OAuth) in the pop up.

3. Enable service and configure permission for members.

4. Login or choose you Microsoft365 administrator account.

5. Click Accept to grant the access.

6. Click Set up under Synchronization settings. Choose whether to import, update, or delete accounts.

7. Click Set up under Import account settings. This setting lets you sync the domain you prefer and import all accounts or specific groups from Microsoft Entra ID. By default, BenQ IAM will import all accounts from the primary domain. If you are satisfied with the default settings, you can skip to step 8.
Please note: Since BenQ IAM syncs all accounts in a tenant, users with multiple domains should organize them into groups. You can then selectively import specific groups based on your needs.
8. If you select Import by group, please fill in and add the group name you want according to Microsoft Azure Portal.

9. Click Apply.
10. Enable Automatic synchronization to activate user auto-provisioning from your Microsoft Entra ID.

11. Click Sync now to finish the settings.