Trustwave and Cybereason Merge to Form Global MDR Powerhouse for Unparalleled Cybersecurity Value. Learn More

Request a Demo

Trustwave and Cybereason Merge to Form Global MDR Powerhouse for Unparalleled Cybersecurity Value. Learn More

Request a Demo
Services
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

Database Security

Prevent unauthorized access and exceed compliance requirements.

Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

View All Trustwave Services
Solutions
BY INDUSTRY
BY REGULATION
BY TOPIC
Microsoft Security
Unlock the full power of Microsoft Security
Offensive Security
Solutions to maximize your security ROI
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
We reduce cyber risk and fortify organizations
Awards and Accolades
Recognition by analysts and media outlets
Trustwave SpiderLabs Team
Global researchers, ethical hackers, and responders
Trustwave Fusion Security Operations Platform
Unprecedented security visibility and control
Trustwave Security Colony
Access to cybersecurity threat protection resources
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
Register
Login
Resources
BLOGS
UPCOMING
MEDIA & ASSETS
NOTICES
HELP
  1. Support
  2. MailMarshal Cloud
  3. Knowledge Base

HOWTO: Creating an Application Registration for Entra ID Group Import

 

This article applies to:

  • MailMarshal Cloud
  • Entra ID Group Import

Question:

  • How do I register an application in Azure/Entra to allow group import to MailMarshal Cloud?
  • What are the options and requirements for use of imported Entra groups?

Background:

MailMarshal Cloud allows you to retrieve user group information directly from Microsoft Entra ID (formerly known as Azure Active Directory). To connect, you must create an "application" in Entra.

You will enter the Client ID, Tenant ID, and Secret from Entra in the MailMarshal Cloud console

Procedure:

Note common missed items in this procedure: 
  • Be sure you grant Application permissions (not "delegated")
  • Be sure to grant admin consent

  1. Log in to the Microsoft Entra Admin Center (entra.microsoft.com). The minimum required permission is "Cloud Application Administrator"
  2. If you have access to more than one tenant, use the Settings menu (gear icon in the top bar) to switch to the specific tenant.
  3. From the left menu browse to Identity > Applications > App registrations. Click New registration.
  4. Enter a name.
  5. For "supported account types" accept the default (single tenant).
  6. Click Register.
  7. From the overview page of the application, note the following values:
    • Application (client) ID
    • Directory (tenant) ID
  8. From the API Permissions page of the application, grant the following Microsoft Graph permissions (Application permissions):
    • Group.Read.All
    • Member.Read.Hidden
    • OrgContact.Read.All
    • User.Read.All
  9. After updating the above permissions, click Grant admin consent (above the list of permissions)
  10. From the Certificates & Secrets page of the application, create a new client secret. Note the value (it is only available immediately after creation).
Use the Client ID, Tenant ID, and client secret on the Entra Connector Properties page of the MailMarshal Cloud console.

Group usage:

After creating the connector you can select groups to import using the Import Entra Groups button on the User Groups page.

Groups are populated immediately. Group membership is queried and updated hourly.

  • IMPORTANT: Groups retrieved from Entra cannot be used directly in rule User Matching, Digests, or other MailMarshal Cloud features. You must add the Entra groups to local groups, and then select the local groups in User Matching or other features.

The following options are present on the Entra Connector Properties page:

Additional addresses to retrieve

Set these options to retrieve additional addresses from Entra ID.

Retrieve Distribution Groups
Choose this option to retrieve Distribution Group aliases from Entra ID.
Insert Disabled Users
Choose this option to include users marked as disabled in the import. (Users associated with distribution lists or other automation are commonly marked as disabled.)

Generic groups to create

Set these options to populate groups with specific types of addreses. The above options do not apply to these groups.

Use 'All Entra Distribution Groups' User Group
Automatically create and populate a User Group including Entra distribution groups. 
Use 'All Entra Organizational Contacts' User Group
Automatically create and populate a User Group including Entra Organizational Contacts.
  • Note: Organizational Contacts originate from Exchange Online or hybrid Active Directory. Only contacts with an email address in your configured domains will be present in this list.

Trustwave MailMarshal Cloud KB article Q21218

Last Modified: August 18, 2024

 Turn On Turn Off Highlight