Requirements for this guide:

• You have access to the Azure portal at https://portal.azure.com
• You are entitled to access the overview of and to add/edit groups at https://portal.azure.com/#view/Microsoft_AAD_IAM/GroupsManagementMenuBlade/~/AllGroups
• You are entitled to add/delete users in groups

For your information: Since Microsoft renamed Azure Active Directory to Entra ID, we will use the new naming in this guide.

To use the Flip Syncer for the automated provisioning of user information and channel assignments, preparations must be made in Entra ID. We will show you the necessary steps in this guide.

1. Create a naming strategy for your Entra ID groups

To standardize the management of Entra ID groups as much as possible, we recommend creating the groups according to a fixed naming pattern. This is also important for the Flip Syncer, as it uses this pattern to assign users and channels.

Choose a prefix that will be used for all flip-relevant groups. We recommend a prefix similar to “Flip-App-” so that you can immediately determine the intended use based on the name.

Once you have defined a prefix, you can set up the necessary groups. Some examples with the prefix “Flip-App-”:

• Flip-App-All-Users
• Flip-App-Sys-Admins
• Flip-App-Channel-Development_Stuttgart
• Flip-App-Channel-Graphic_Design

Please note that we also use an extended pattern for the channel assignments. In this example, it is “Flip-App-Channel-”.

2. Create required Entra ID groups for Flip

2.1. The user base for Flip

The Flip Syncer requires a group that includes everyone who should have access to your Flip app. This represents the basis for the synchronization of user information.

For example, create a group with the name “Flip-App-All-Users” which includes all your employees or at least the employees to use your Flip app.

Please note the groups’ ID and name because we require it to add it to the Flip Syncer configuration.

If you created a test user as suggested in Enabling Single-Sign-On for your Flip app, please also add the user to this group.

2.2. The Flip system admin group

Create a separate group for all employees who will use the Flip app as system administrators. These users are automatically assigned the corresponding role during the sync process and then have access to the Admin Console in Flip.

For example, create a group with the name “Flip-App-Sys-Admins” which includes all employees to use your Flip app with the assigned role of a system administrator.

Please note the groups’ ID and name because we require it to add it to the Flip Syncer configuration.

2.3 Channels based on Entra ID groups

Create separate groups for every channel you want to create in Flip. Users in those groups are automatically assigned to the corresponding channel as a member.

For example, create a group with the name “Flip-App-Channel-Development_Stuttgart” which includes all employees of the development department in Stuttgart. This will create a channel “Development Stuttgart” and adds every referenced user as a member.

Please note the used prefix because we require it to add it to the Flip Syncer configuration.

In addition, please note, that further channel configuration has to be done manually in the Admin Console.

3. How to manage channel assignments with Entra ID groups

As you can read in the previous chapter, we can create channels automatically and control the assignment of employees via the Entra ID groups. As already mentioned, we recommend a template for naming these groups. It is important to know that underscores “_” can be converted into spaces. This allows us to create channels with correct names. Some examples:

Here we’re using “Flip-App-Channel-” as the prefix. The prefix is always being removed. Furthermore, we’re using the option to replace underscores with spaces.

Further reading about Entra ID groups: https://learn.microsoft.com/en-us/entra/fundamentals/how-to-manage-groups

3.1. Adding new members to a Flip channel

Adding new employees to a channel is simply done by adding them to your Entra ID group. They will be assigned with the standard role “member”. You also can remove employees from channels by simply removing them in your Entra ID group.

It’s significant to note that the Flip Syncer will keep manually assigned employees and won’t remove them from the channels. You can assign members manually within the Admin Console of Flip if needed.

In addition, please ensure that new channel members have been added to the Entra ID group used as the main user base.

3.2. Adding an admin to a Flip channel

If you add an owner to your Entra ID group, the user will be promoted to the role “admin” for the specific Flip channel.

It’s significant to note that the Flip Syncer will keep manually promoted “admin” assignments and won’t remove them from the channels. You can promote members to the role “admin” manually within the Admin Console of Flip if needed.

4. Send the channel information to Flip

Please provide the following information to your contact person at Flip:

• ID and name of the Entra ID group to use as the user base
• ID and name of the Entra ID group to use as the system admin group
• The prefix / naming pattern of the Entra ID groups considered as Flip channels
• Optional: Two or three examples of those Entra ID group names