Skip to main content

Adding External Users to the KORE Intelligence Platform via Azure/Entra (CRM Connected)

Danny Campbell
  • Updated

This document outlines the steps required to add external users to the KORE Intelligence Platform when using Azure/Entra ID. It is intended for customer administrators responsible for managing users across Azure/Entra, CRM, and the KORE Intelligence Platform. 

This document is applicable for Dynamics and for Salesforce only if it is integrated with Azure/Entra for SSO. This document is not applicable for Standalone environments without a CRM.

 

Key Definitions

  • External User: A user from a different Azure/Entra domain than your primary tenant.
  • KOREAuth: Two Circles' identity platform used for handling SSO and authentication across the KORE Intelligence Platform.

  • Global User Id: A unique identifier used by the KORE Intelligence Platform to associate a user with their identity across systems. This value must be set for SSO to function.

     

Prerequisites

Step 1: Notify Two Circles of External Domains

Before adding any external users, you must inform Two Circles of each external domain that will be used (e.g., partnercompany.com).
This allows Two Circles to configure domain redirection for SSO purposes.

Note: This only needs to be done once per external domain, not per user.

 

Step 2: Add the External User to Azure/Entra

  1. Invite the user as a External user to your primary Azure/Entra tenant. See https://learn.microsoft.com/en-us/entra/external-id/b2b-quickstart-add-guest-users-portal for Microsoft documentation.
  2. Once accepted, the user will have a username that looks like:
    first.last_EXTERNAL-DOMAIN.org#EXT#@PRIMARY-DOMAIN.onmicrosoft.com

 

Step 3: Add the User to the CRM 

  • Add the same user to your CRM system, and assign a KORE Role to the user

 

Step 4: Wait for Sync to the KORE Intelligence Platform

  • Allow up to 20 minutes for the user record to sync from the CRM to the KORE Intelligence Platform. 

Note: If the user does not come across, please reach out to Two Circles support who can manually sync the user record.

 

Step 5: Review the User in the KORE Intelligence Platform

  1. Navigate to the Intelligence Platform Users page
    • Configuration Records -> Platform Settings -> Intelligence Platform Users (Under Access & Security)
  2. Locate the new external user and open their user record.
  3. Review the user details:
    • Ensure the Email Address is valid and the user can receive mail at that address.
    • Confirm that the Global User Id is currently blank (this indicates that SSO is not yet configured for the user).

Step 6: Trigger the User Registration Process

  1. Click the “...” (overflow menu) in the top right of the user record.
  2. Select “Reset User Login”.
  3. This sends a registration email to the user and begins the identity linking process via KOREAuth.
  4. The Invitation Status will change to Pending until the user completes registration.

Note: The user has 48 hours to complete the registration. If they do not, you must repeat the “Reset User Login” process.

 

Step 7: Finalize Access

  • Once the user completes registration:
    • It may take up to 20 minutes for access to be fully provisioned.
    • The Invitation Status will change from Pending to -.
    • The Global User Id will now have a value, indicating SSO is properly linked.

 

Troubleshooting

  • If a user does not receive the registration email, or is unable to complete the login process, please contact Two Circles Support for assistance.