Skip to content

Sync users in Sophos Central

You need to import users from your directory service.

To do this, you set up directory service synchronization in Sophos Central (if you haven't already done this).

If you're using Okta as the identity provider, you must synchronize user groups in on-premises Active Directory (AD) with both Sophos Central and Okta.

Our instructions show how to set up synchronization from Microsoft Entra ID (Azure AD) to Sophos Central.

Note

If you have on-premises Active Directory (AD), the steps depend on which identity provider (IdP) you plan to use for ZTNA:

  • If your IdP will be Azure, synchronize from AD to Microsoft Entra ID (Azure AD) first (using Microsoft AD Connect). Then follow our instructions below.
  • If your IdP will be Okta, follow the instructions in Set up synchronization with Active Directory.

To set up synchronization from Microsoft Entra ID (Azure AD) to Sophos Central, do as follows:

  1. Sign in to Sophos Central.

  2. Go to My Products > General Settings.

  3. Under Administration, click Directory service.

  4. Click Get started.

    Directory service page.

  5. In Select directory service, select Microsoft Entra ID (Azure AD) Sync.

    Select directory service dialog.

  6. In Configure Azure Sync Settings, do as follows:

    1. In Step B: Configure Azure Sync Settings, enter the settings you used for your Azure tenant and click Test Connection.

    2. In Step C: Select users and groups to include in the sync, choose which groups you want to sync.

      The groups you select must be security enabled in Microsoft Entra ID (Azure AD).

      For more information on how to use the filters, see Filter users and groups in the Sophos Central Admin help.

    3. Click Save & Sync in the upper right of the page.

    Directory service page.

  7. Your user groups are imported. To check this, go to People > Manage Users and Groups and click the Groups tab.

    User groups list.

To keep your groups synchronized with Sophos Central in future, you can set up scheduled synchronization. See "Set up your synchronization schedule" in Set up synchronization with Microsoft Entra ID (Azure AD).

Next, set up an identity provider.