Configure directory synchronization

Open Settings → Access & security → Directory connections → Add directory connection and choose Microsoft Entra ID (the only provider so far).

Open Settings → Access & security → Directory connections → Add directory connection and choose Microsoft Entra ID (the only provider so far).

In the Azure portal

1. Go to Entra ID → App registrations → New registration. Name it something like Phishtime Directory Sync and leave the redirect URI blank.
2. Open the new app, then API permissions → Add a permission → Microsoft Graph → Application permissions. Add User.Read.All, then click Grant admin consent.
3. Go to Certificates & secrets → Client secrets → New client secret. Copy the secret value now; it is shown only once.
4. On the app's Overview page, copy the Directory (tenant) ID and the Application (client) ID.

In Phishtime

1. Enter a Display name. It is just a label in lists and does not affect the connection.
2. Enter the Tenant (Directory) ID, Application (Client) ID, and Client secret from the steps above.
3. Save. Phishtime checks the credentials against Microsoft Graph before it stores the connection.

Syncing

Once connected, run a sync by hand from Employees → Import → Microsoft Entra ID. Syncs are not automatic or scheduled. Only employees whose email domain is on your verified-domain allowlist are imported, the same as with CSV import.