Microsoft Entra ID n8n integrationAutomate Microsoft Entra ID with n8n.

Creates a group in the directory, ready to receive members in the same workflow.

• Group Name: the name shown in the address book for the group.
• Group Email Address: the mail alias, local part only, without the domain (alias).
• Mail Enabled: whether the group is mail-enabled.
• Group Type: Unified for a Microsoft 365 group, or Security.
• Membership Type: Assigned to add specific users, or Dynamic to let a Membership Rule such as user.department -eq "Marketing" add and remove them for you.

Removes an existing group from the directory.

• Group to Delete: a resource locator, so you can pick the group from the list n8n loads from your tenant, or feed it from an earlier node with an expression like {{ $json.field }}.

Retrieves the data of one specific group, on its own or with its member list attached.

• Group to Get: the group you want, picked from the list or passed in from a previous step.
• Include Members: an option that brings the members back with the group, instead of a second call.
• Output: Simplified for a readable set, Raw for everything, or Selected Fields when you name what you need.

Lists the groups of the tenant, all of them or a narrowed selection.

• Return All: enabled, n8n walks the pages of the API until every group is back; disabled, Limit caps how many come through.
• Filter: a query parameter such as startswith(displayName, 'a'). Left empty, all the groups are returned.

Edits an existing group without recreating it. The 11 entries of Update Fields are all optional, so you send only what changes.

• Group to Update: the target group.
• Visibility: Private or Public.
• Description: the description carried by the group.
• Allow External Senders and Auto Subscribe New Members: wait a few seconds before editing these two on a group that was just created.

Puts an existing user into an existing group. Both objects have to exist already, so this operation usually sits after a creation step.

• Group: the destination group, chosen from the list or resolved from the incoming item.
• User to Add: the account that joins it.

Opens a new account in the directory. Five fields are required, the rest of the profile sits in the 36 entries of Additional Fields.

• Display Name: the name shown in the address book.
• User Principal Name: the UPN, for instance NathanSmith@contoso.com.
• Mail Nickname: the mail alias for the user.
• Password and Account Enabled: the initial password, and whether the account is active on creation.
• Force Change Password: Next Sign In, or Next Sign In with MFA.

Deletes an existing user account.

• User to Delete: a resource locator, so the account is picked from the tenant list or resolved from the item coming out of the previous node.

Reads one account and returns its profile data.

• User to Get: the account to read.
• Output: Simplified, Raw, or Selected Fields when the workflow only needs part of the profile.
• Fields: the exact fields added to the output when Selected Fields is on.

Pulls a list of accounts, from a handful to the whole directory.

• Return All: on, the node chains the API pages to bring back every user; off, Limit stops it earlier.
• Filter: a query parameter, for example startswith(displayName, 'a').
• Output and Fields: trim the payload to the columns your destination actually stores.

Takes a user out of a group. The account stays in the directory, only the membership goes away.

• Group: the group the person leaves.
• User to Remove: the account losing that membership.

Changes an account that already exists. Update Fields holds 41 optional entries and only the ones you fill in are sent.

• User to Update: the account to edit.
• Account Enabled: the switch that turns a sign-in on or off.
• Job Title: the title carried by the user.
• Password: it has to satisfy the minimum requirements set by the password policies.