Entra User Import

Search Azure AD by name or email and bulk-import matching users as s3BEAR accounts in one click. Imported users are linked by their Azure oid, so they get JWTs the moment they sign in via SSO — no password to set, no email to send.

How to use

UI: Users → Import from Entra → search → select → import.

API:

# Search Entra for users matching "kemal"
curl "http://localhost:8200/api/v1/users/entra/search?q=kemal" \
  -H "Authorization: Bearer $TOKEN"

# Import selected users
curl -X POST http://localhost:8200/api/v1/users/entra/import \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"azure_oids": ["abc-123-...", "def-456-..."]}'

Import requires Azure Entra credentials to be configured — see Authentication.

Use case: onboarding a new team

A new 8-person data team joins. Instead of asking each one to log in once so they appear in the system, search "Data Team" in Entra, import all 8 at once, and drop them into the Data Engineers group with permissions on data-* buckets. They have access before their laptops are even unboxed.


Related: Authentication · Group Permissions