This article covers setting up a OneDirectory environment connected to your own Microsoft 365 data. There are two ways to get here:
• From a trial: in the top bar, click "You're exploring a sample company. Add your company".
• Directly: go to https://app.onedirectory.com/setup.
Step 1: Sign in with Microsoft
1. On the Set up your company screen, click See requested permissions if you want to review each Microsoft Graph permission and why OneDirectory requests it. OneDirectory uses read-only access via Microsoft Graph, and never accesses content like email, files, calendars, or Teams messages.
2. Click Continue with Microsoft and sign in with your Microsoft 365 account. This verifies your identity, links your Microsoft tenant, and creates your Directory Console.
Step 2: Connect Microsoft 365
1. In the Directory Console, select Connect Microsoft 365.
2. Sign in using a Microsoft 365 admin account.
3. Review and approve the requested permissions.
What this does
• Establishes a one-way, read-only sync from Entra ID to OneDirectory.
• Imports user profile data from Entra ID.
• Automatically builds your employee directory, reporting lines, and org chart structure.
Why admin access is required
Admin approval is required by Microsoft to allow secure, tenant-wide access to user profile data. Once approved, OneDirectory is registered as an enterprise application in Entra ID, where you can review or revoke its access at any time.
Security note OneDirectory requests read-only access to user profile fields only. It cannot write to or modify your environment. See the Data Access, Security, and Compliance article for the full permission scope. |
The initial data sync
• OneDirectory automatically starts syncing user data as soon as permissions are approved.
• No manual import or field mapping is required.
• Sync time depends on tenant size, usually a few minutes, and the import continues even if you close the tab.
• After the first import, an incremental sync runs every hour and a full sync runs every 24 hours. You can trigger one manually with Request full sync under Data Sources.