Setting Up Microsoft Entra Integration for AI Knowledge Pass

This guide walks Organization Administrators through configuring the Integration for AI Knowledge Pass to add users to or remove them from a Microsoft Entra group when they complete the assigned program, or if they have not completed it by the scheduled end date.

Prerequisites

• Microsoft Entra admin access to your organization's Microsoft Entra tenant
• Admin access to Immersive One
• Tenant ID, Client ID, Client Secret for the Microsoft Entra instance, so Immersive can add users to or remove them from groups

Overview

AI Knowledge Pass now connects directly to Microsoft Entra, so access to enterprise AI tools can be granted or removed automatically—no manual IT step required other than having set up groups in Microsoft Entra. This guide covers connecting Microsoft Entra as your identity provider. Once configured, users are added to or removed from a group when they complete an assigned AI Knowledge Pass Program, or if they have not completed it by the scheduled end date.

Step 1: Register a Microsoft Entra Application

1. In your Microsoft Entra Tenant in the sidebar go to Entra ID > App registrations
2. Select an existing application to use or create a new application by clicking on New Registration and complete the application registration process
3. Go to API permissions and ensure the app has the following permissions
4. On the Overview of the application you will see the Application (client) ID and Directory (tenant) ID. Take a note of these as they marry up to the Client ID and the Tenant ID on the Immersive One platform respectively
5. Go to Certificates & secrets
6. Click on Client secrets tab > New client secret. A side panel will appear for which you can set a description and expiry date on the secret
7. Click Add
8. Copy the secret value for later, it will only appear once. This will be used in the Immersive One Platform as the Client Secret

Step 2: Enter Microsoft Entra Details in Immersive One

1. Log in to Immersive One as an admin.
2. Navigate to Manage > Platform Settings > Integrations and go to Identity Provider > Microsoft Entra.
3. Add the Tenant ID, Client ID, Client secret for your Microsoft Entra instance.

4. You will be on the details and action view page, Create an Action by clicking the  “Create action” button
   
5. Select the AI Knowledge Pass Program that will be the trigger. Select the action “Add users to group” or “Remove users from group”. In the Trigger field, choose when that action runs: when someone completes the program, or if they have not completed it by the scheduled end date. Then search for the  Microsoft Entra group you want those users added to or removed from.
   

Errors

If you are not seeing users added to or removed from the group as expected, there may be errors with the action. In Immersive One, on the page where your actions are listed, you will see a View button in the Errors column if an action has failed to add or remove those users.

Click on the View button to see issues.

A slide out will appear with the error.

You will be able to retry failed actions for users here as needed. Note that this may not solve the problem. The error message will indicate what the issue is.

Supported Features

Adding users to or removing them from a Microsoft Entra group when they complete an assigned AI Knowledge Pass Program, or if they have not completed it by the scheduled end date.

Not Yet Supported

Multiple Microsoft Entra organizations per AI Knowledge Pass tenant

Troubleshooting