Microsoft Entra ID

Configure Puzzel for automatic user provisioning with Microsoft Entra ID

12 August 2026Updated+30 / −4 lines

In brief

The Puzzel provisioning article now documents OAuth2 Client Credentials Grant authentication. It adds steps to create an OIDC client, set token lifetimes to 3600, generate a shared secret, and enter the client ID, secret, and token endpoint.

What Entra admins need to know

Administrators configuring Puzzel provisioning should prepare these OIDC credentials and select the OAuth2 Client Credentials Grant authentication method.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

Remove users in Puzzel when they don't require access anymore.

Keep user attributes synchronized between Microsoft Entra ID and Puzzel.

Single sign-on to Puzzel (recommended).

OAuth2 Client Credentials Grant authentication is supported.

Prerequisites

To configureConfigure automatic user provisioning for Puzzel in Microsoft Entra ID:ID

Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
Browse to Entra ID > Enterprise apps
Before you configure provisioning in Microsoft Entra ID, create an OIDC client in the Puzzel portal and generate a client credentials. Microsoft Entra ID uses these credentials when you set up the connection in the Provisioning tab. To acquire the client credentials:
1. Sign in to the https://app.puzzel.com/settings. Locate OIDC Clients and select Configure.
2. On the OIDC Client Configuration page, select + Add in the upper-right corner.
3. Configure the new client as follows:
  1. In Client Name, enter a descriptive name (for example, Microsoft Entra provisioning).
  2. For the grant type, select Client Credentials, then select Save.
  3. Open the Lifetimes tab and set both the Access Token Lifetime and the Refresh Token Lifetime to 3600. Select Save.
4. Generate a shared secret for the client:
  1. On the OIDC Client Configuration page, select the configured client name, then select the first icon (Secrets) in its row.
  2. Select Add > Shared Secret.
  3. Select Generate Secret, copy the generated secret value, and store it in a secure location. Select Save.
In Authorization Method, select OAuth2 Client Credentials Grant as the Authentication Method. In the Tenant URL field, input your Puzzel Tenant URL and enter the Client ID, Client Secret ~~Token. Select~~ ~~Test Connection~~ ~~to ensure Microsoft Entra ID can connect to Puzzel. If the connection fails, ensure your~~and Token Endpoint retrieved from Puzzel ~~account has the required admin permissions and try again.~~portal.

Select Create to create your configuration.

@@ -2,7 +2,7 @@ title: Configure Puzzel for automatic user provisioning with Microsoft Entra ID description: Learn how to automatically provision and deprovision user accounts from Microsoft Entra ID to Puzzel. ms.topic: how-to-ms.date: 03/20/2026+ms.date: 08/10/2026  # Customer intent: As an IT administrator, I want to learn how to automatically provision and deprovision user accounts from Microsoft Entra ID to Puzzel so that I can streamline the user management process and ensure that users have the appropriate access to Puzzel. --- @@ -18,6 +18,7 @@ This article describes the steps you need to perform in both Puzzel and Microsof > * Remove users in Puzzel when they don't require access anymore. > * Keep user attributes synchronized between Microsoft Entra ID and Puzzel. > * [Single sign-on](~/identity/enterprise-apps/add-application-portal-setup-oidc-sso.md) to Puzzel (recommended).+> * OAuth2 Client Credentials Grant authentication is supported.  ## Prerequisites @@ -46,7 +47,7 @@ This section guides you through the steps to configure the Microsoft Entra provi  <a name='to-configure-automatic-user-provisioning-for-Puzzel-in-azure-ad'></a> -### To configure automatic user provisioning for Puzzel in Microsoft Entra ID:+### Configure automatic user provisioning for Puzzel in Microsoft Entra ID  1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](~/identity/role-based-access-control/permissions-reference.md#cloud-application-administrator). 1. Browse to **Entra ID** > **Enterprise apps**@@ -65,9 +66,34 @@ This section guides you through the steps to configure the Microsoft Entra provi  	![Screenshot of Provisioning tab automatic.](common/application-provisioning.png) -1. In the **Tenant URL** field, input your Puzzel Tenant URL and Secret Token. Select **Test Connection** to ensure Microsoft Entra ID can connect to Puzzel. If the connection fails, ensure your Puzzel account has the required admin permissions and try again.+1. Before you configure provisioning in Microsoft Entra ID, create an OIDC client in the Puzzel portal and generate a client credentials. Microsoft Entra ID uses these credentials when you set up the connection in the Provisioning tab.+To acquire the client credentials:+   1. Sign in to the `https://app.puzzel.com/settings`. Locate **OIDC Clients** and select **Configure**. -   ![Screenshot of Provisioning test connection.](common/provisioning-test-connection.png)+      ![Screenshot of showing OIDC Clients.](./media/puzzel-provisioning-tutorial/configure.png)++   2. On the **OIDC Client Configuration** page, select **+ Add** in the upper-right corner.+   3. Configure the new client as follows:+      1. In **Client Name**, enter a descriptive name (for example, `Microsoft Entra provisioning`).+      1. For the grant type, select **Client Credentials**, then select **Save**.+      1. Open the **Lifetimes** tab and set both the **Access Token Lifetime** and the **Refresh Token Lifetime** to `3600`. Select **Save**.++         ![Screenshot of showing Lifetimes tab.](./media/puzzel-provisioning-tutorial/lifetime.png)++   4. Generate a shared secret for the client:+      1. On the **OIDC Client Configuration** page, select the configured client name, then select the first icon **(Secrets)** in its row.++         ![Screenshot of showing OIDC Client Configuration page.](./media/puzzel-provisioning-tutorial/secret.png)++      1. Select **Add > Shared Secret**.++         ![Screenshot of showing the shared secret.](./media/puzzel-provisioning-tutorial/shared-secret.png)++      1. Select **Generate Secret**, copy the generated secret value, and store it in a secure location. Select **Save**.++1. In Authorization Method, select **OAuth2 Client Credentials Grant** as the **Authentication Method**. In the **Tenant URL** field, input your Puzzel **Tenant URL** and enter the **Client ID**, **Client Secret** and **Token Endpoint** retrieved from Puzzel portal.++      ![Screenshot of OAuth2 Client Credentials Grant.](./media/puzzel-provisioning-tutorial/test-connection-new.png)  1. Select **Create** to create your configuration.