This guide outlines how to integrate Microsoft Azure Active Directory (Azure AD / Entra ID) with the Mobile Guardian Dashboard to streamline user synchronisation and enforce secure, identity-based mobile device authentication.
Prerequisites & Required Information
Before initiating configuration, ensure your Azure and network infrastructure meets the following baseline requirements:
- Azure AD Domain Services (AD DS): Must be licensed within Azure for user sync and mobile device authentication within Mobile Guardian.
- SSL Certificate: Required by Azure when allowing access via the internet. This certificate must be from a public certificate authority and match the wildcard domain of your AD DS environment.
- Password Reset: Users must reset their passwords to sync from AD to AD DS. See the Microsoft guide for further information.
Configuration Metadata Checklist
| Parameter Category | Required Parameters |
| Directory User Sync | Account Suffix (e.g., @domain.com), Base DN, Domain Controller (IP/FQDN), Service Username & Password. |
| Mobile Authentication | Account Suffix, Base DN, Domain Controller Hostname, LDAP Port, LDAPS Port, Public SSL Certificate File. |
User Sync
- Log in to Mobile Guardian
- Navigate to Settings
- Select Directory Settings
- Enter User Sync Information
- Fill in the form with the gathered information.
- Optional: Enable SSL
- Use the slider to enable SSL if required.
- Additional Settings
- Configure additional settings based on your preference.
- Test and Save
- Click "Test Connection". If successful, you will see a "Connected" message. Click "Save" to save the configuration.
Congratulations, you have set up the first configuration!
Mobile Authentication
- Navigate to the Mobile Authentication Tab
- Go to Settings > Active Directory > Mobile Authentication.
- Enter Mobile Authentication Information
- Fill in the form, ensuring the certificate is from a public certificate authority.
- Additional Options
- Scroll down to configure further options such as proxy settings, time-out, and inactivity time-out. Select a sign-out behaviour
Save Configuration
- Click "Save" and you will receive a notification that the settings have been saved.
Congratulations, you have completed setting up the dashboard configuration for Azure.
Any device that you enrol will now display a sign-in screen similar to the following when opening Mobile Guardian: