What it does
Your IT administrator gives or removes Frontu access by putting people in the right Entra groups. Nobody has to add or archive users in Frontu by hand.
Once a day, Frontu checks your Entra groups and:
creates a Frontu user for each new member of a Frontu group, with the right role and permissions;
archives users you've put in the deactivation group;
emails your contacts when it can't do something automatically.
New users can sign in straight away with Sign in with Microsoft, because their Frontu login is their Microsoft sign-in name.
How groups work
Each Entra group stands for one type of Frontu user. We agree the list with you during setup.
You can have as many office-user groups as you need. Each one maps to a permission group in Frontu, such as Team Lead or Service Admin.
What your Entra administrator needs to do
Create the security groups you agreed with Frontu and send us each group's name and ID.
Register an app in Entra that can read group members (Microsoft Graph). Share its connection details with Frontu securely, never by plain email.
Fill in two details for each user in Entra:
Employee ID: required for mobile app users. It must match your ERP system.
Branch / office: required for everyone. It must match an office code in Frontu.
Make sure every user has a correct Microsoft sign-in name, because it becomes their Frontu login.
Everyday use
New employee: add them to the right Frontu group in Entra. They appear in Frontu after the next daily sync.
Employee leaves: add them to the deactivation group. Frontu archives them in the next sync.
Change of role: after the first sync, Frontu doesn't update existing users. A changed role, office or name in Entra has to be changed in Frontu too.
When something can't be done automatically
Frontu emails the person's office contact and your integration administrators, and explains why.
People who can't be archived stay in the deactivation group, and Frontu tries again every day. Once the blocker is fixed, archiving goes through on its own. Until then, the reminder email repeats daily.
Contact your Frontu account manager if you are interested.
This logic is eligible for customers with proservice plans.