Azure AD / Entra ID Sync

Azure AD sync, now branded Microsoft Entra ID sync after Microsoft's 2023 rename, is the synchronization of user attributes from a Microsoft 365 tenant's identity directory into an email signature management platform. The platform connects via Microsoft Graph API with appropriate permissions (typically `User.Read.All` and `Directory.Read.All`), reads the directory at scheduled intervals, and uses the attributes (displayName, jobTitle, department, mail, mobilePhone, businessPhones, officeLocation, thumbnailPhoto, plus any custom extension attributes) to populate signature templates. Entra ID sync is the canonical directory sync mechanism for Microsoft 365 environments. Hybrid configurations (on-premises Active Directory synced to Entra ID via Microsoft's own AD Connect tool) are handled identically because the Entra ID directory is the authoritative source for cloud sign-ins regardless of where the original user record originated. Permissions are granted via Microsoft 365 admin consent and can be revoked at any time without impacting employee sign-ins.