<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}img.fr-dib.fr-fir { margin-right: 0; text-align: right;}img.fr-dib.fr-fil { margin-left: 0; text-align: left;}img.fr-dib { margin: 5px auto; display: block; float: none;}img.fr-bordered { box-sizing: content-box; border: solid 5px #CCC;}img.fr-shadow { box-shadow: 10px 10px 5px 0px #cccccc;}img.fr-rounded { border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;}</style><style>
p {
margin: 0;
}
span.fr-emoticon.fr-emoticon-img {
background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle;
}
span.fr-emoticon {
font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0;
}
blockquote {
border-left: solid 2px #5e35b1; color: #5e35b1; margin-left: 0; padding-left: 5px;
}
blockquote blockquote {
border-color: #00bcd4; color: #00bcd4;
}
blockquote blockquote blockquote {
border-color: #43a047; color: #43a047;
}
table.grid {
border-collapse: collapse;
}
table.grid td,
table.grid th {
border: 1px solid #ddd;
}
.fr-fic.fr-dib {
display: block; margin: 5px auto;
}
.fr-fic.fr-dib.fr-fir {
text-align: right; margin: 5px 0 5px auto;
}
.fr-fic.fr-dib.fr-fil {
text-align: left; margin: 5px auto 5px 0;
}
.fr-fic.fr-dii {
float: none; margin: 5px auto;
}
.fr-fic.fr-dii.fr-fil {
float: left; margin: 5px auto;
}
.fr-fic.fr-dii.fr-fir {
float: right; margin: 5px auto;
}
img.fr-dib.fr-fir {
margin-right: 0; text-align: right;
}
img.fr-dib.fr-fil {
margin-left: 0; text-align: left;
}
img.fr-dib {
margin: 5px auto; display: block; float: none;
}
img.fr-bordered {
box-sizing: content-box; border: solid 5px #CCC;
}
img.fr-shadow {
box-shadow: 10px 10px 5px 0px #cccccc;
}
img.fr-rounded {
border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;
}
</style><style>
p {
margin: 0;
}
span.fr-emoticon.fr-emoticon-img {
background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle;
}
span.fr-emoticon {
font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0;
}
blockquote {
border-left: solid 2px #5e35b1; color: #5e35b1; margin-left: 0; padding-left: 5px;
}
blockquote blockquote {
border-color: #00bcd4; color: #00bcd4;
}
blockquote blockquote blockquote {
border-color: #43a047; color: #43a047;
}
table.grid {
border-collapse: collapse;
}
table.grid td,
table.grid th {
border: 1px solid #ddd;
}
.fr-fic.fr-dib {
display: block; margin: 5px auto;
}
.fr-fic.fr-dib.fr-fir {
text-align: right; margin: 5px 0 5px auto;
}
.fr-fic.fr-dib.fr-fil {
text-align: left; margin: 5px auto 5px 0;
}
.fr-fic.fr-dii {
float: none; margin: 5px auto;
}
.fr-fic.fr-dii.fr-fil {
float: left; margin: 5px auto;
}
.fr-fic.fr-dii.fr-fir {
float: right; margin: 5px auto;
}
img.fr-dib.fr-fir {
margin-right: 0; text-align: right;
}
img.fr-dib.fr-fil {
margin-left: 0; text-align: left;
}
img.fr-dib {
margin: 5px auto; display: block; float: none;
}
img.fr-bordered {
box-sizing: content-box; border: solid 5px #CCC;
}
img.fr-shadow {
box-shadow: 10px 10px 5px 0px #cccccc;
}
img.fr-rounded {
border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;
}
</style><p><strong>In this guide we will cover:</strong></p><p><strong>- Configuring Automated Creation of New starters</strong></p><p><strong>- The End-User Portal Experience</strong></p><p><br></p><p><br></p><p id="isPasted">This guide outlines how to configure automated onboarding for new users into Entra. New users can be created in Entra automatically from Halo, using the user details logged on a new starter request form in the Halo portal. This guide will include setting up the Microsoft CSP integration, syncing user data, and enabling onboarding through the self-service portal.</p><p><br></p><p>This functionality relies on runbooks and other pre-built elements that are only available in instances deployed/trials started from April 2025 onwards. Instances deployed after this date will have this functionality available out of the box. Instances deployed before this date will not have this functionality available out of the box, they will however be able to download this functionality in future, we aim to make this available from Q1 2026. </p><p><br></p><p><strong><span style="font-size: 12pt;">Who Can use this Functionality? </span></strong></p><p>- You are using Microsoft CSP and have GDAP over your customer's tenants.</p><p>- You have a single Microsoft Entra tenant.</p><p><br></p><p>If you would like to use this functionality across multiple Entra tenants, but you do not use CSP to mange them, you will not be able to use this functionality. </p><p><br></p><p><strong><span style="font-size: 14pt;">Configuring Automated Creation of New starters</span></strong></p><p><strong><span style="font-size: 12pt;">Step 1: Set Up the CSP Integration in Halo</span></strong></p><p>To begin, you’ll need to integrate your Microsoft CSP with Halo. A guide on how to set up this integration can be found here: <a data-fr-linked="true" href="https://usehalo.com/halopsa/guides/1189" id="isPasted" target="_blank" rel="noopener noreferrer">CSP Integration Guide</a>.</p><p><br></p><p><strong><em>Note: If you would like licenses to be assigned to users during onboarding, ensure that the ‘Allow licences to be managed from within Halo’ checkbox is enabled during setup.</em></strong></p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjVkNTMxOWU0LTViN2ItNDJlNy1iYjExLWU3YTIxM2Y4ODQ5OSJ9.xRllZWbomGWz7ETp7xF0MW1wuvgLsWVuphN1UjouRvk" class="fr-fic fr-fil fr-dib" width="1014" height="556"></p><p><strong><span style="font-size: 10pt;">Fig 1. Allow licences to be managed from within Halo<br></span></strong></p><p><br></p><p id="isPasted"><strong><span style="font-size: 12pt;">Step 2: Run an Initial Import of Tenants, Licenses, and Users. (Note, this step can be skipped if CSP has already been set-up and has been running imports via the Halo Integrator)</span></strong></p><p>Once the CSP integration is configured:</p><ul><li>Navigate to Configuration > Integrations > Microsoft CSP.</li><li>Navigate to the ‘Tenants’ tab and use the ‘Import Tenants’ button to run an initial import of Tenants and available licenses</li></ul><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImIwMWUwZjdlLTMwNDctNGMyYS1hNzg3LTAxYmM4NWEwZWZjNiJ9.Hlit18s5TY82cs92oy9ISMhRX_s238rFm9o0JNA8O7U" class="fr-fic fr-fil fr-dib" width="1044" style="width: 1046px; height: 655.941px;" height="656"></p><p><strong><span style="font-size: 10pt;">Fig 2. Import tenants</span></strong></p><p><br></p><ul><li id="isPasted">Navigate to the ‘Users’ tab and use the ‘Import Users’ button to run an initial import of Users</li></ul><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjVkNDZmMjY5LTIxMWItNDBhNS05MDhkLTcyNmM3M2ZmY2QwMyJ9.BGzJOgW1wskM-FvZePo-XeteiA0uy6Tu5IpKNrbs1D0" class="fr-fic fr-fil fr-dib" width="854" style="width: 856px; height: 590.015px;" height="590"></p><p><strong><span style="font-size: 10pt;">Fig 3. Import Users</span></strong></p><p><br></p><p id="isPasted"><strong><span style="font-size: 12pt;">Step 3: Configure Azure Groups for Each Client</span></strong></p><p>For each client:</p><ul><li>Open the client record.</li><li>Go to the ‘Azure’ tab.</li><li>Add the relevant Azure AD group names.</li><li>(Only the group names are required — these will be shown as selectable options on the self-service portal.)</li></ul><p><img data-fr-image-pasted="true" border="0" width="918" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjhmMzlhOWU4LTE3MjAtNDJkOS1iODQzLTY5MzRkNWZjMGQ0NyJ9.yGbsui6vO3L8iB9cKbg-FXKhVAbtLeRq01-KHCfkIVM" alt="A screenshot of a computerAI-generated content may be incorrect." style="box-sizing: inherit; border-style: none; cursor: pointer; padding: 0px 1px; user-select: none; max-width: calc(100% - 10px); min-width: 10px; color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; width: 920px; height: 382.73px;" id="isPasted" class="fr-fic fr-fil fr-dib" height="383"></p><p><strong><span style="font-size: 10pt;">Fig 4. Add Azure AD group names</span></strong></p><p><br></p><p id="isPasted"><strong><span style="font-size: 14pt;">End-User Portal Experience</span></strong></p><p><strong><span style="font-size: 12pt;">Submit a New Starter Request</span></strong></p><p>End-users can initiate an onboarding request by navigating to the 'New Starter Request' on the self-service portal (Services and Products > Users and Services > New Starter)</p><p><br></p><p><img data-fr-image-pasted="true" border="0" width="602" height="302" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImI0MDYzNTZiLWY0ZWItNDc0MS04OTM0LWQ3N2U4M2I1NTlmZCJ9.MWbGjyW4Ut2DjWISuWewhixPu7rnq2G0n715zb06uik" alt="A screenshot of a websiteAI-generated content may be incorrect." style="box-sizing: inherit; border-style: none; cursor: pointer; padding: 0px 1px; user-select: none; max-width: calc(100% - 10px); min-width: 10px; color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" id="isPasted" class="fr-fic fr-fil fr-dib"></p><p><strong><span style="font-size: 10pt;">Fig 5. Submit new starter request in portal </span></strong></p><p id="isPasted"><br></p><p>From this form, users can select:</p><ul><li>The email format for the new starter (firstname.lastname, firstinitial.lastname, etc.)</li><li>Azure AD groups to assign the new user to.</li><li>Licenses to allocate from the available pool against that customer, imported from the CSP integration.</li></ul><p><br><img data-fr-image-pasted="true" border="0" width="601" height="288" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjYwYWU3Yzc5LTNkMjItNDMxOC1hYmQxLWYxOGFlODJlYTc0MiJ9.KKug6tgMOHUqOdIl1jsrLRXpBHY5J7kxkmm3d1hLXQE" alt="A white background with black linesAI-generated content may be incorrect." style="box-sizing: inherit; border-style: none; cursor: pointer; padding: 0px 1px; user-select: none; max-width: calc(100% - 10px); min-width: 10px; color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" id="isPasted" class="fr-fic fr-fil fr-dib"></p><p><strong><span style="font-size: 10pt;">Fig 6. New starter request form<br></span></strong></p><p><br></p><p id="isPasted">Once the request is submitted:</p><ul><li>A ticket is created in the Halo agent portal.</li><li>All the onboarding details including groups, licenses, user principal name, and temporary password will be available under the ‘Additional fields’ tab of the request.</li></ul><p><br></p><p><strong><span style="font-size: 12pt;">Approve and Trigger Onboarding</span></strong></p><ul><li>Once logged, the ticket will launch an approval process. For more on configuring approval processes please see the guide<a data-fr-linked="true" href="https://usehalo.com/halopsa/guides/2396" id="isPasted" target="_blank" rel="noopener noreferrer"> Approval Processes Overview</a>.</li><li> After clicking ‘Approve’ there will be an option to ‘Trigger Azure Onboarding Automation’</li></ul><p> </p><p><img data-fr-image-pasted="true" border="0" width="602" height="263" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjFmYWI3ZjRmLWU5Y2EtNGUwNi1iNDA3LTVhYjM3MTYxOGIyOSJ9.lv-Qx3lkcbPc_M25ZuiHWGlFyeMesz3LmLRUTWGPNMM" alt="A screenshot of a computerAI-generated content may be incorrect." style="box-sizing: inherit; border-style: none; cursor: pointer; padding: 0px 1px; user-select: none; max-width: calc(100% - 10px); min-width: 10px; color: rgb(0, 0, 0); font-family: Aptos, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" id="isPasted" class="fr-fic fr-fil fr-dib"></p><p><strong><span style="font-size: 10pt;">Fig 7. Trigger Azure Onboarding Automation</span></strong></p><p><br></p><p id="isPasted">With this option enabled, once approved, the automation will:</p><ul><li>Create the user in Azure</li><li>Assign them to the selected groups</li><li>Apply the selected licenses</li></ul><p>Onboarding only proceeds after approval, ensuring administrative control before provisioning.</p><p style='margin-top:0cm;margin-right:0cm;margin-bottom:8.0pt;margin-left:0cm;line-height:115%;font-size:12pt;font-family:"Aptos",sans-serif;'> </p>
