Skip to main content

​
What is JIT for Entra ID?

In this guide we will set up just-in-time Entra ID access to customer Microsoft 365 tenants. When you have multiple Entra ID tenants your technicians need to access, you can leverage idemeum to automatically manage individual on-demand admin accounts. Technicians request admin accounts, login to do their business, and then after some time the accounts will be disabled and passwords rotated. You can request Entra JIT accounts from idemeum portal, or you can integrate our platform with your ticketing system, so that you request Entra JIT accounts right from customer support tickets.

​
Set up JIT for Entra ID

There are several steps involved to configure Entra ID access with JIT admin accounts.
We are assuming you already have your MSP idemeum cloud tenant provisioned. If not, reach out to our support team for help.
1

Create idemeum child tenant

As a first step you need to create a child organization in your parent MSP tenant.
  • Login to MSP admin portal
  • Navigate to Tenants and create a child organization
More information about how to create a child organization.
2

Create Entra ID app and configure it in idemeum

At this step you need to create an application in Entra ID tenant and set up idemeum to connect to M365 tenant using that application.We have documented step-by-step instructions on how to set up Entra ID application. 
3

Test JIT for Entra ID login

  • Navigate to the customer / organization admin portal
  • Search for Entra ID application and click on ...
  • Now you can request JIT account and view provisioned credentials Request Entra