Microsoft Entra ID Integration Guide

 

Register Nimblr in Entra

• Log in to the Azure portal and search for Microsoft Entra ID.

 

 

 

• In the left menu, under Manage, select App registrations, then click New registration.

 

 

• Give the registration a name, for example Nimblr.

• Select Accounts in this organizational directory only.

• Under Redirect URL, choose Web, enter https://nimblr.net/go/ad/reg, then click Register.

• Three values appear: Application (client) ID, Directory (tenant) ID, and Object ID. Copy the Application (client) ID and Directory (tenant) ID somewhere safe. You'll need them in a later step.

 

 

Create a client secret

• Select Certificates & secrets, then click New client secret.

 

 

• Add a description, for example Nimblr Secret, set the expiration to 24 months or longer, then click Add.

 

• Copy the Value and save it somewhere safe. This is your client secret. It's shown once, and Entra replaces it with asterisks afterward.

 

Grant API permissions 

• Select API permissions. User.Read should already be listed. Click Add a permission.

 

 

• Select Microsoft Graph, then Application permissions.

 

Choose Application Permissions on the next screen.

 

• Search for and select User.Read.All and GroupMember.Read.All (you can select both before continuing), then click Add permissions.

 

 

 

• Your selected permissions now appear in the list. Click Grant admin consent for [organization], then confirm.

 

 

Connect Entra to Nimblr 

• Log in to your Nimblr account, go to Settings > Integrations, and select Microsoft Entra ID as the integration type.

 

• Paste the Application ID, Client Secret, and Directory ID you saved earlier, then click Save Changes. A confirmation appears once it's connected.

Choose how users are activated 

Choose how new users from the directory sync get activated. You can change this at any time.

• Activate new users manually. New users get a "Pending" status, and an admin has to activate them before training starts.

• Activate new users automatically. New users are activated right away, and training invitations or simulations start immediately.

Choose a group membership method 

• Linked. Assign one or more external directory groups to a Nimblr group. This works well for multi-language organizations, since it can place employees in a Nimblr group with the right language already set. You assign groups from Groups > Integration after finishing this setup.

• Manually. Synchronizes all new users from the selected Entra groups into the Nimblr default group. You can then move users into different Nimblr groups yourself.

• If you chose Manually, select which Entra groups to sync. Add the external directory group or groups that should sync into the Nimblr default group. You can still create additional Nimblr groups and move users into them by hand; to do that, enter the Entra group name directly in the Nimblr configuration window.

• Turn on Auto-Create Group Auditors if you want Nimblr to automatically create group auditors with read-only access to reporting and statistics, based on each user's manager attribute. By default, these auditors get a monthly summary report by email covering their scope.

Assign groups with the Linked method

This section applies only if you chose the Linked group membership method above.

Once the integration is set up, you can assign Entra groups to a Nimblr group.

Before assigning groups, you may want to create additional Nimblr groups first. Go to the Groups menu and click Add New Group. A new group inherits its settings from the default group, and you can change them independently afterward.

To assign users from a specific external directory group to a Nimblr group, go to that group, click Edit, then open the Integration tab. Add one or more external directory groups, then click Save Changes.

Managing AD Groups in Nimblr

Any user in an Entra AD group assigned to Nimblr uses a Nimblr license, regardless of their status in Active Directory.

A few things worth knowing:

• Every user in an assigned AD group counts toward license usage.

• Nimblr treats every user in the group as active, even if they're paused, disabled, or inactive in AD.

• Pausing or disabling a user in AD doesn't stop them from using a license in Nimblr.

To keep license usage and access under control:

• Create AD groups specifically for Nimblr, containing only the users who should have access.

• Review these groups regularly to make sure they still reflect the right users.

• Avoid assigning broad groups like "All Employees" unless everyone in that group should actually have access.

For example, a broad group like All_Company_Users, which might include interns, paused staff, or system accounts, isn't a good fit. A group like Nimblr_Active_Users, containing only the people who need training, works better.

Important: once an integration is active, manual user management through the portal turns off. From then on, adding, removing, or editing users happens through Active Directory.