Backdrop offers the ability for users to setup a sync with Azure Active Directory. This sync will import the users and groups required for Backdrop to function. This guide covers how to get setup and what options are available.


Azure AD integration is powered by the Microsoft admin consent system. Users select the School Setup option under administration in Backdrop.



This action takes users to the Integration select screen where you select either Microsoft or Google setup. Select Microsoft and you are redirected to the account selection screen. Here they can select the user account they wish to give admin consent with. Once given Backdrop will use this account to query Azure Active Directory. The data returned will be based on the permissions of that account returning only what they have access to.



Once an account is selected and access approved, the flow takes the user to the Microsoft integration setup screen in Backdrop. Here a user can select the type of Integration they want.



Type of Import

Full imports are powered by Microsoft Graph and support either Azure AD or School Data Sync Microsoft services. These imports pull in both users and groups and can be used to do a complete school setup without an MIS/SIS system. Groups only imports are powered by Microsoft Teams. This requires that users have already been added to Backdrop by MIS/SIS or CSV upload. Backdrop checks that the members of the Teams groups are already present in the solution and if they are, the Microsoft Teams groups are added as teaching groups for use in Classroom/Wellbeing. The full import option (Azure/Education) will also add Teams groups if available.

Data Source

Select the data source to Microsoft Education (School Data Sync) or Azure AD (Active Directory) depending on where your data is stored you wish to import. Only one data source can be used.


Include Automatic Login Credentials 

This will take the email address of the student users and populate the auto login system with this data. This allows the system to automatically identifiy students on devices where the Backdrop device client is installed. The system adds the full email to identify users on ChromeOS or Android devices. For Windows and Mac devices we read everything before the @ symbol as the local user account on the device


Example

a.student@school.com - login for ChromeOS/Android

a.student - login for Windows/Mac


Once you are happy with your selections, click Update Details



Select the importable kind and map it to the desired Azure AD group.


User - members of this Azure AD group are added as Staff.

Child - members of this Azure AD group are added as Students.

Tutor Group - members of this Azure AD group are added as a Tutor Group.

Teaching Group - members of this Azure AD group are added as a Teaching Group. 


Search for the group you want to map against each value. Click the add button to confirm the mapping and add it to the config.


Once you are happy with groups you want to import. Click the Start Sync button to begin the import process. This can take several minutes depending on the size of the import.

The sync will run automatically every 12hrs. Mappings can be updated at anytime from the edit microsoft settings under school setup.