> ## Documentation Index
> Fetch the complete documentation index at: https://wavecnct.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID

> Keep your Wave team directory in sync with Entra ID (Azure AD)

<Info>
  Available on the **Teams** and **Enterprise** plans. This is an organization-level integration, configured by an admin.
</Info>

The Microsoft Entra ID integration keeps your Wave team directory in sync with your Microsoft Entra ID (formerly Azure Active Directory) tenant. Employee changes, including new hires, role updates, and departures, flow into Wave in real time via Microsoft Graph change notifications.

## How to Connect

<Steps>
  <Step title="Open the integration">
    Go to **Integrations → Microsoft Entra ID** (admin only).
  </Step>

  <Step title="Connect with an admin account">
    Click **Connect** and sign in with a Microsoft account that has admin access to your Azure tenant.
  </Step>

  <Step title="Authorize Wave">
    Authorize Wave to read your directory.
  </Step>

  <Step title="Enable auto-sync">
    Turn on **Auto-sync** to apply all future directory changes to Wave automatically, or manage syncs manually.
  </Step>
</Steps>

Wave requests authentication and token-refresh permissions, plus read access to user profiles and directory members.

## What Gets Synced

| Entra ID field                            | Wave user field               |
| ----------------------------------------- | ----------------------------- |
| First name, last name, display name       | Name                          |
| Work email (`mail` / `userPrincipalName`) | Email                         |
| Mobile phone                              | Mobile phone                  |
| Business phone(s)                         | Work phone                    |
| Job title                                 | Job title                     |
| City / office location                    | City                          |
| Language preference                       | Language                      |
| Profile photo                             | Avatar (proxied through Wave) |

**Sync direction**: Entra ID → Wave (inbound only)

**When**: Real-time via Microsoft Graph subscriptions (webhooks), plus on-demand manual refresh

## Features

* **Real-time sync**: employee changes appear in Wave within minutes via Microsoft Graph change notifications.
* **Auto-deactivation**: when an employee is removed from Entra ID, their Wave account is deactivated.
* **Profile photos**: photos are fetched from Entra and proxied through Wave, so they load without requiring a Microsoft login.
* **Subscription auto-renewal**: Microsoft Graph webhook subscriptions expire periodically. Wave renews them automatically so the connection stays active.
* **Import preview**: view all Entra ID users before enabling auto-sync.

## Limitations & Requirements

* Guest users (whose UPN contains `#EXT#`) have their email sourced from the `mail` field.
* This is an organization-level integration. Individual team members do not connect separately.
* Requires an Azure Active Directory tenant with admin consent.

## Disconnecting

Go to **Integrations → Microsoft Entra ID** and click **Disconnect**. This removes the integration, revokes Wave's access, and unregisters the Graph subscription. Existing Wave users are not deleted.