Entra ID Groups

Overview

HP Workforce Experience (WXP) integrates seamlessly with Entra ID device groups, enabling IT Admins to streamline the assignment of policies, Pulse surveys, remediation actions, and script deployments. Once configured and the import groups are selected, WXP automatically syncs these groups every 24 hours, eliminating manual updates.

Key Capabilities

• Entra ID Group Integration for dynamic and automated device targeting.

• Policy Assignment based on device group membership.

• Targeted Pulse Surveys to gather feedback from relevant users.

• Remediation Actions & Script Deployment tailored to specific device groups.

• Automatic Group Sync to reflect real-time changes in device membership.

Use Cases

• Post-Rollout Feedback: Survey users in a specific Intune deployment ring after a software or app update to gather sentiment and identify issues.

• Targeted Remediation: Automatically deploy scripts or fixes to devices in specific Entra ID groups experiencing known problems.

• Personalized Communication: Send policies or notifications only to users impacted by a change, improving relevance and reducing noise.

Prerequisites

Note: The HP Insights Agent must be installed on the device for WXP to perform various tasks on the devices. WXP only supports import of Intune-managed devices.

1. An Entra ID Tenant.
   1.1 Login to https://portal.azure.com with your work email. The Microsoft Azure Portal page appears.
   

2. The Entra ID user/service account must have the following permissions:
   GroupMember.Read.All DeviceManagementManagedDevices.Read.All Device.Read.All offline_access openid User.Read
   

Note: You may need a privileged role assigned to a user/service account to proceed. Please contact your Entra ID administrator.

How to Enable & Configure

Note: Before you can import groups from Entra ID, you must configure a connection to the Entra ID tenant. To do this, a user with the Connector Admin role in Workforce Experience Platform is required.

1. In the left menu of the HP Workforce Experience Platform, click Integrations.

2. Under Entra ID Groups, click Connect.
   
   
   
   
   
   

3. Read through the details in the pop-up. Click Connect.
   

4. Sign in to the Microsoft login page.
   

   5. Authorized users will see the Permissions requested page. Leave the checkbox ‘Consent on behalf of your organization’ unselected. Click Accept.

6. The Entra ID Groups integration card shows as green Connected. The Connect button changes to a Disconnect option.

Post connection, the following will apply:

1. Depending on the number of Security Groups, it might take a few minutes to an hour before you can continue with the Group import.

2. Changes to imported group devices (Additions or Removals of the devices under that group) might take up to 24 hours to reflect.

3. Non-imported groups might take up to 24 hours before appearing in the dropdown, ready for import.

4. The new Entra ID Group with the device might take up to 5 minutes before appearing in the dropdown, ready for import.

5. Entra ID Group removal might take a few minutes to reflect in WXP.

6. Once connected successfully, the Entra ID App will appear under your tenant's Enterprise application. To view the app, login.

   6.1 Login to https://portal.azure.com. In the Manage Microsoft Entra ID card, click View.
   

   
   6.2 In the Overview page, click Enterprise applications.
   

   6.3 Filter by the app's name to view app details.

Contact Us

For any assistance, [create a support case] or email [email protected].