MyQ X can synchronize users from Microsoft Entra ID using LDAPS, via the Entra ID Domain Services managed domain service. This method uses the same LDAP synchronization source as Active Directory and other LDAP directories – the difference is in how the Entra ID Domain Services instance is configured in Azure before MyQ connects to it.
Guidance on when to use this source is provided in the Deployment guide. See User Synchronization.
For the full LDAP sync source configuration reference, see Synchronize Users from LDAP.
Prerequisites
-
Microsoft Entra ID Domain Services enabled and configured in your Azure subscription. This is a paid Microsoft add-on – it is not included in standard Entra ID licensing.
-
Secure LDAP (LDAPS) enabled on the Entra ID Domain Services instance.
-
The Secure LDAP external IP address of the Entra ID Domain Services instance.
-
The DNS domain name of the Entra ID Domain Services instance.
-
The issuing root CA certificate installed in the Windows certificate store on the MyQ server.
Key Considerations
Setup is performed in Azure before configuring MyQ. The Entra ID Domain Services instance and its LDAPS configuration must be fully operational before adding the authentication server in MyQ. The Microsoft setup guides below cover both steps.
Connection parameters differ from standard AD. When adding the LDAP authentication server in MyQ, use the Entra ID Domain Services-specific values rather than a local AD domain controller address – see Configure the Authentication Server in MyQ, below.
Configure Entra ID Domain Services in Azure
Study the following Microsoft guides before proceeding to MyQ configuration:
Once both steps are complete, note the following values from the Entra ID Domain Services Properties page in the Azure portal – you will need them in MyQ:
|
Value |
Where to find it |
|---|---|
|
DNS domain name |
Properties page, DNS DOMAIN NAME field |
|
Secure LDAP external IP address |
Properties page, SECURE LDAP EXTERNAL IP ADDRESS field |
Configure the Authentication Server in MyQ
Go to MyQ > Settings > Authentication Servers and add a new LDAP server using the following parameters:
|
Setting |
Value |
|---|---|
|
Domain |
DNS domain name of the Entra ID Domain Services instance |
|
Security |
SSL |
|
Server |
Secure LDAP external IP address of the Entra ID Domain Services instance |
|
Port |
636 |
Configure the Synchronization Source
Go to MyQ > Settings > User Synchronization, click +Add, and select Add LDAP source. Select the authentication server you created.
The attribute mapping and options for Entra ID Domain Services follow the same conventions as Active Directory, since Entra ID Domain Services exposes a Windows Server AD-compatible schema.
Run and Schedule Synchronization
To run synchronization immediately, go to MyQ > Settings > User Synchronization, select the source, and click Synchronize now. If configured correctly, synced users and groups appear under MyQ > Users.
To synchronize automatically on a schedule, go to MyQ > Settings > Task Scheduler and configure the User Synchronization task.