KyberGate + Microsoft Entra ID
Sync your Microsoft 365 directory with KyberGate for user-based filtering and classroom management. Groups, users, and attributes — all automatic.
Perfect for schools running Microsoft 365 Education who want user-level web filtering policies without manual user management.
How It Works
Register App
Create an app registration in the Azure portal with read-only directory permissions. Takes about 5 minutes.
Enter Credentials
Paste your Tenant ID, Client ID, and Client Secret into KyberGate Settings → Integrations → Microsoft Entra ID.
Auto-Sync
Users and groups sync automatically every 6 hours. Map groups to filtering policies and you're done.
What Syncs From Entra ID
Everything you need for user-based web filtering — pulled directly from your Microsoft 365 directory.
User & Group Sync
Automatically import users and security groups from your Microsoft Entra ID tenant. New users appear in KyberGate within hours — no manual entry required.
- All user accounts synced
- Security & distribution groups
- Nested group support
- Disabled account filtering
Group-to-Policy Mapping
Map Entra ID groups directly to KyberGate filtering policies. Students in '6th Grade' group? They get the Middle School policy automatically.
- Map any security group
- Multiple groups per user
- Priority-based policy resolution
- Dynamic group membership
Automatic Sync Every 6 Hours
KyberGate checks your Entra ID tenant every 6 hours for changes. New students, group changes, and departures are reflected automatically.
- Scheduled every 6 hours
- Delta sync (only changes)
- Full sync on demand
- Sync status in dashboard
Microsoft 365 Education
Purpose-built for schools running Microsoft 365 Education. Supports EDU tenant structures, student/teacher roles, and school data sync.
- EDU tenant support
- Student & teacher roles
- Department mapping
- School unit mapping
Group-Based Policy Assignment
Assign web filtering policies based on Entra ID group membership. Different policies for students, teachers, staff, and admin — all managed from your directory.
- Per-group policies
- Teacher override groups
- Staff access groups
- Guest/visitor policies
Sync User Attributes
Pull rich user data from Entra ID including name, email, department, job title, and custom attributes. Use any attribute for policy targeting.
- Name & email
- Department & job title
- Grade level (custom attribute)
- User principal name
Use Cases
How schools use Microsoft Entra ID with KyberGate to automate web filtering.
User-Level Filtering
Apply different web filtering policies per student based on their Entra ID group. 3rd graders get strict filtering, 11th graders get research-level access.
Role-Based Access
Teachers and staff get different web access than students — automatically. No manual policy assignment when a new teacher is hired.
Automatic Provisioning
New student added to Microsoft 365? They're automatically synced to KyberGate with the right filtering policy. Zero IT tickets.
Instant Deprovisioning
Student leaves the district? Disable their Entra ID account and KyberGate removes their access on the next sync. Clean and automatic.
Requirements
What you need to get started with the Microsoft Entra ID integration.
Microsoft 365 Education Tenant
An active Microsoft 365 Education subscription with Azure Active Directory (Entra ID). Works with A1, A3, and A5 licenses.
Azure AD Admin Access
You'll need Global Administrator or Application Administrator permissions to create the app registration and grant directory read permissions.
KyberGate Pro or Enterprise Plan
Directory integrations are available on KyberGate Pro ($9/device/yr) and Enterprise ($15/device/yr) plans.
Ready to Connect Microsoft Entra ID?
Start a free 30-day pilot. We'll help you connect your Azure AD tenant, sync your directory, and deploy filtering policies.
30 days free · Up to 50 devices · No credit card required