Applies to
- Enterprise
Capabilities
Who can use this capability
- System Admin
Azure Active Directory for Smartsheet FAQ
Who can use this?
Plans:
- Enterprise
Permissions:
- System Admin
Find out if this capability is included in Smartsheet Regions or Smartsheet Gov.
How long will it take to provision users via Directory Integration?
Azure AD has different sync times for provisioning depending on the sync configuration,
number of users and groups, and sync type (initial or incremental). Refer to this Microsoft Support article for details.
How are users provisioned in Smartsheet through Azure AD?
- In Legacy Collaborator Model plans, unlicensed users added through Azure AD don't appear in the Admin Center immediately; they're only visible after signing in or being added to a group.
- For User Subscription Model plans, all new Azure AD users are automatically added as Provisional Members unless they're System Admins. System Admins can be set up as non-Members (Viewers) upon provisioning.
If you're unsure about your model type, learn how to determine the model your plan is on.
How do I troubleshoot provisioning errors in Azure AD?
See this Microsoft Support article for information on troubleshooting errors in Azure AD.
Can I integrate with Smartsheet from a self-hosted (on premises) AD server?
You can use Azure AD Connect to sync your self-hosted AD instance with your Azure AD instance. You can then use your Azure AD instance for directory integration with Smartsheet.
What happens when someone in Active Directory has their email changed?
The email change request is sent to Smartsheet and their primary email address is updated with the new email address. Similar to in-app primary email address changes, this does not impact any shared Smartsheet items and items they own, or other existing references to them in Smartsheet.
The old email address will be completely removed from the account. If you want to set up your original email address as a secondary alias, you can manually add it to your user profile. For more information, see Change the email address used with your Smartsheet account.
How do we ensure users are added (similar to User Auto Provisioning) when they sign into Smartsheet for the first time?
Once you have your groups configured and everything running, we suggest treating your SMARTSHEET_USER user group as an “all users” group. By adding all of your users to this user group, you're ensuring that they'll be automatically added to your company plan upon sign-in.
We have a number of Smartsheet tiles in our Enterprise Applications section in Azure. How do I know which one controls Azure Directory Provisioning?
When viewing All applications in your Azure environment, look for the Smartsheet Enterprise Tile with application ID 3290e3f7-d3ac-4165-bcef-cf4874fc4270.
Is User Auto Provisioning (UAP) required for Directory Integration?
Yes. You must enable User Auto Provisioning to make sure you add new users to your organization. If you don't enable User Auto Provisioning, new users aren't added. This leads to provisioning errors.