Skip to main content
Available on the Teams and Enterprise plans. This is an organization-level integration, configured by an admin.
The Microsoft Entra ID integration keeps your Wave team directory in sync with your Microsoft Entra ID (formerly Azure Active Directory) tenant. Employee changes, including new hires, role updates, and departures, flow into Wave in real time via Microsoft Graph change notifications.

​
How to Connect

1

Open the integration

Go to Integrations → Microsoft Entra ID (admin only).
2

Connect with an admin account

Click Connect and sign in with a Microsoft account that has admin access to your Azure tenant.
3

Authorize Wave

Authorize Wave to read your directory.
4

Enable auto-sync

Turn on Auto-sync to apply all future directory changes to Wave automatically, or manage syncs manually.
Wave requests authentication and token-refresh permissions, plus read access to user profiles and directory members.

​
What Gets Synced

Sync direction: Entra ID → Wave (inbound only) When: Real-time via Microsoft Graph subscriptions (webhooks), plus on-demand manual refresh

​
Features

  • Real-time sync: employee changes appear in Wave within minutes via Microsoft Graph change notifications.
  • Auto-deactivation: when an employee is removed from Entra ID, their Wave account is deactivated.
  • Profile photos: photos are fetched from Entra and proxied through Wave, so they load without requiring a Microsoft login.
  • Subscription auto-renewal: Microsoft Graph webhook subscriptions expire periodically. Wave renews them automatically so the connection stays active.
  • Import preview: view all Entra ID users before enabling auto-sync.

​
Limitations & Requirements

  • Guest users (whose UPN contains #EXT#) have their email sourced from the mail field.
  • This is an organization-level integration. Individual team members do not connect separately.
  • Requires an Azure Active Directory tenant with admin consent.

​
Disconnecting

Go to Integrations → Microsoft Entra ID and click Disconnect. This removes the integration, revokes Wave’s access, and unregisters the Graph subscription. Existing Wave users are not deleted.