Microsoft Entra ID provider

Note: Microsoft has renamed Azure Active Directory (Azure AD) to Microsoft Entra ID. This site has been updated to reflect the name change, where applicable. Refer to Microsoft documentation for more information.

Relativity can import Entity (Employee/Custodian) data from Microsoft Entra ID (formerly known as Azure Active Directory) through Integration Points. The following perquisites must be established:

1. In Relativity:
   1. You will need to install Integration Points into your workspace. See Installing Integration Points for details.
   2. Once Integration Points is installed, you will then need to install the Integration Points AD provider application. To do so, go to the Files tab in Community, click the Relativity Applications library, and locate the appropriate Microsoft Entra ID for Integration Points ZIP file (formerly known as Azure AD for Integration Points ZIP file).
   Completing these two installations adds Integration Points to your workspace and adds Microsoft Entra ID as a source within Integration Points.

2. In Microsoft Azure:
   • Set up an application in Microsoft Azure which can be used to configure an Integration Point in Relativity. Only an Application Administrator with access can create an application, find credentials, and delete an application. If you do not have permissions, contact your admin. For more information on Application Administrators, see Microsoft’s documentation.

3. The final step is to import Microsoft Entra ID into Relativity. For more information, see Importing from Microsoft Entra ID.

Registering an Azure application and credentials

To create your application ID and secret, you must have Application Administrator privileges to log into your Azure Portal and register an app.

Start with registering your application in the Azure portal by following the steps below. For more information on registering an application in Azure, see Microsoft's documentation or Microsoft's authentication documentation.

Note: These steps must be completed by a Microsoft 365 administrator.

1. Open your Azure Portal.
2. Click Microsoft Entra ID (formerly known as Azure Active Directory).
3. Click App registrations.
4. Click New Registration to display the Register an application page.
5. Enter an application name in the Name field.
6. Accept the default setting, Accounts in this organizational directory only, as the supported account type.
7. Click Register.
8. Once the application is registered, make note of the Application (client) ID and Directory (tenant) ID for use later when configuring the data source in RelativityOne Collect.

Next, from the app's page, add permissions to the web API by following the steps below:

1. Click API Permissions.
2. Click Add a permission.
3. Click Microsoft Graph.
4. Select Application Permissions.
5. Select the following options from the Application Permissions section:
   • Directory – Directory.Read.All
   • Group – Group.Read.All
   • User – User.Read.All
     
     Notes: This permission is required if Filter by Group functionality is used.
6. Click Add Permission.
7. Click Grant Permission.

Finally, grant Admin consent for the API by following the steps below:

1. Click the API Permissions tab.
2. Click Grant admin consent for [tenant].
3. In the pop-up window, click Accept.

Finding Azure credentials

If an application is already created and you need to find the application information to complete the Source Connection step, follow the steps below in the Azure Portal. For more information, see relevant Microsoft documentation on the Microsoft site.

1. Open your Azure Portal.
2. Click Microsoft Entra ID (formerly known as Azure Active Directory).
3. Navigate to Enterprise applications.
4. In the list of applications, locate and click on your application.The application page displays.
5. Navigate to Properties.
6. Click the copy icon next to the Application ID. The ID is copied to your clipboard to use as needed.

Removing application access

Removing access to an application can be done outside of Relativity in Microsoft Entra ID. To remove access, follow the steps below in the Azure Portal:

1. Click Microsoft Entra ID (formerly known as Azure Active Directory).
2. In the navigation menu, click Enterprise applications.
3. In the list of applications, locate and open the desired application.
4. In the application, click Delete.