Skip to main content
This page explains how to configure a workflow that creates a Microsoft Entra ID account when an employee joins. The workflow then assigns the apps you choose. Use the template “Onboarding via Entra ID (App Assignment)”.
Microsoft Entra ID (Azure AD) is the only identity provider supported at present.

​
Configuration flow

After completing the prerequisites, configure the workflow in three main steps.
  1. Identity provider integration (Entra ID): Connect Entra ID and link your apps to services.
  2. Configure automation mapping: Set up the mapping with Microsoft Entra ID.
  3. Create and publish the workflow: Create the workflow from the template. Then set the conditions, services, apps, and notifications.

​
How the workflow runs

The template runs the following steps from top to bottom. Under “Services to create accounts in”, App Assignment follows Entra ID. App Assignment runs after the Entra ID account is created.

​
Steps to configure onboarding via Entra ID

  1. Go to Automation > [Create workflow] > [Onboarding via Entra ID (App Assignment)]. The Onboarding via Entra ID (App Assignment) automation template card
  2. On the builder screen, click “1. Event Trigger” and set “Execution Schedule”. The template runs the workflow 1 day before the contract start date. Execution Schedule on the 1. Event Trigger screen, set to 1 day before the contract start date
  3. Click “2. Conditions” and set the conditions for target employees. The template targets full-time employees. The available items are the same as in “2. Conditions” in Configure an onboarding workflow. The 2. Conditions screen with the contract start date and employee type set
  4. Click “3. Data Mappings” and check that each field of the Entra ID account matches the employee information.
    The app is assigned to the account set in the “Primary Email” field of Data Mappings. If this field is empty, the app assignment fails.
    The 3. Data Mappings screen with the target and field mappings
  5. Under “4. Services to create accounts in”, set up Microsoft Entra ID.
    1. Click the Microsoft Entra ID step to open its “Settings” panel on the right. Select the workspace name from the “Service settings - Workspace name” dropdown. Under “Account settings”, check settings such as the email address and name. Change the items you need. The Settings panel of Microsoft Entra ID (Azure AD) with the workspace and account settings
    2. In the same group, click “App Assignment” and set the following items.
      If “No managed apps are available. Add apps to this identity provider before configuring this action.” appears, first link your apps to services in Identity provider integration (Entra ID).
      The App Assignment settings panel with the identity provider workspace, the Data Mapping action, and the managed apps
  6. Click “5. Notification”, click [+ Add Notification], and set the notification method: Slack or Email. The steps are the same as “5. Notification” in Configure an onboarding workflow. The + Add Notification button under 5. Notification
  7. After all settings are complete, all checks in the builder turn green. Click [Publish] or [Dry Run]. For details on dry runs, see Dry-run a workflow. In a dry run, the App Assignment result reads “Assigned the app to the IdP account”. The Dry Run and Publish buttons and a green check
  8. The “Confirm workflow automation settings” screen appears. Enter the workflow name and click [Publish]. Note: You cannot use a name that is already registered. The workflow name field on the Confirm workflow automation settings screen
  9. When “Workflow has been published” appears, click [OK]. The Workflow has been published message

​
Troubleshooting

For the messages shown while you set up this workflow, see Check Entra ID assignment status and errors. You cannot delete the Entra ID step of the template. To build a workflow without Entra ID, create it from scratch. For details, see Create a workflow from scratch.

​
Check the results

When the workflow runs, it requests the assignment for each selected app. You can check the results on the Runs and Logs tabs. For when the workflow runs, see Onboarding and offboarding automation flow.
Last modified on November 5, 2026