Azure AD Contact & User Integration

• 1. Overview
• 2. Objective
• 3. Key Features

The Azure AD Contact & User integration enables the Odoo environment to synchronize both Address Book Contacts and Azure Active Directory (AD) Users directly into Odoo. Administrators can securely connect their Odoo database to their Microsoft Azure Application by providing the necessary API credentials. By using dedicated synchronization buttons, the system pulls the requested data from Azure and automatically structures it as standard Contacts within Odoo.

The main objective of this integration is to establish a seamless, error-free synchronization pipeline between Microsoft Azure AD and Odoo. The integration allows businesses to:

• Reliably accept and map Azure contacts into Odoo by fixing previously broken sync mechanisms.
• Extend functionality to pull organization-wide Azure AD Users and create them as Odoo Contacts.
• Trigger synchronizations manually via independent "Sync Contacts" and "Sync Users" buttons.
• Securely authenticate using Azure Application credentials via the Microsoft Graph API.

• Corrected Data Mapping: Resolved previous syncing errors within the custom Azure connector to ensure that contact attributes from Azure are successfully and consistently parsed and mapped to Odoo's internal Contact (res.partner) model.
• On-Demand Sync: Administrators can trigger the contact import at any time by clicking the "Sync Contacts" button.
• Secure Authentication: The mechanism securely connects to Azure using the provided Client ID and Client Secret generated from the Azure App Registration.

• Organization User Import: Added a brand new capability to extract the actual internal users from the Azure Active Directory, separate from traditional address book contacts.
• Odoo Contact Creation: Once the Azure users are fetched, the module automatically processes them and creates them as standard Contacts in Odoo for internal business use.
• Dedicated Trigger: Implemented a new "Sync Users" button to specifically execute the Azure User import pipeline.
• API Authentication & Permissions: (Note: To fetch Azure AD Users system-wide, the Microsoft Graph API leverages the /users endpoint instead of the /me/contacts endpoint. This utilizes the OAuth 2.0 "Client Credentials" flow). To successfully fetch these users, the connector passes the following details:
  • Client ID
  • Client Secret
  • Tenant ID (Directory ID) (The Azure App Registration also requires Admin Consent for Application-level API permissions like User.Read.All or Directory.Read.All to successfully read the user list).