Azure AD <-> Salesforce

Automated Salesforce user provisioning and deprovisioning from Azure Active Directory so new starters get access immediately and leavers have it revoked the moment their Azure AD account is disabled.

When a new employee is added to Azure Active Directory, IT teams have to manually create their Salesforce account, set the correct profile and assign the right permissions before the user can work. When someone leaves, that Salesforce account has to be manually deactivated before access is revoked. Both steps are easy to forget or delay - meaning new starters wait for access and former employees retain Salesforce permissions they should not have. This integration pack monitors Azure Active Directory for user creation and status changes and automatically provisions or deactivates the corresponding Salesforce account. New users get Salesforce access the moment they are added to Azure AD. Disabled or removed Azure AD accounts trigger immediate Salesforce deactivation so access is never retained beyond the last working day.

Try For Free

Azure AD + Salesforce

Automated Salesforce User Provisioning and Deprovisioning from Azure Active Directory

See how IntelliPaaS monitors Azure Active Directory for user creation and status changes and automatically provisions or deactivates the corresponding Salesforce account in real time.

Why Deploy This Use Case

A new user is added to Azure Active Directory with their name, email, department and role.
IntelliPaaS detects the new user and automatically creates a matching Salesforce account with the correct profile details provisioned.
An existing Azure AD user is disabled - IntelliPaaS detects the status change and immediately deactivates the corresponding Salesforce account.
IT teams confirm the new starter has Salesforce access and the leaver's account is deactivated - all without a single manual provisioning step.

Use Case Highlights

Automatic user provisioning

New users added to Azure Active Directory automatically receive a provisioned Salesforce account with the correct profile details - no manual IT provisioning required.

Instant access revocation

Disabling or removing an Azure AD user immediately deactivates the corresponding Salesforce account so access is revoked without any manual IT action.

Profile data synchronisation

Name, email, department and role sync from Azure AD to the Salesforce user record so both platforms always reflect the same current identity data.

Zero-delay new starter access

New starters have Salesforce access the moment their Azure AD account is created so they can begin working without waiting for a manual provisioning ticket.

Leaver access removal

Former employees have Salesforce access revoked the moment their Azure AD account is disabled so no access is retained beyond the last working day.

Eliminated manual IT admin

IT teams stop manually creating and deactivating Salesforce accounts for every hire and departure - the integration handles provisioning and access control automatically.