---
title: "Integrate with Microsoft Entra ID"
slug: "integrate-with-microsoft-entra-id-1"
tags: ["Administrator Notes", "Microsoft Entra ID", "Integrate"]
updated: 2026-10-28T13:16:10Z
published: 2026-10-28T13:16:10Z
canonical: "docs.revealdata.com/integrate-with-microsoft-entra-id-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.revealdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Integrate with Microsoft Entra ID

In this topic, you'll learn how to integrate Reveal Hold with Microsoft Entra ID. When you integrate Reveal Hold with Microsoft Entra ID, you can:

- Control in Microsoft Entra ID who has access to Reveal Hold.
- Manage your accounts in one central location - the Microsoft Entra ID portal.

## Add Reveal Hold from the Gallery

> [!NOTE]
> **Note**
> 
> To configure the integration of Reveal Hold into Azure AD, you need to add Reveal Hold from the gallery to your list of managed SaaS apps.

1. Sign in to the [Microsoft Entra ID portal](https://portal.azure.com/) with an Microsoft Entra ID subscription (Application Administrator account).
2. Select the **View** button beneath the **Manage Microsoft Entra ID** tile.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-2FGKA139.png)

1. Select the **Enterprise** applications section.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-IOHC32F8.png)

1. Select **+ New application.**

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-482EMN5V.png)

1. Search for 'Reveal Hold' and select the **Reveal Hold** tile.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-MHLTDUH4.png)

1. Select **Sign up for Reveal Hold** (bottom right corner).

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-YHIT6ZR1.png)

1. Select your Application Administrator account.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-4YSNE5OO.png)

1. Select **Consent on behalf of your organization** (recommended) and click **Accept**. With 'Consent on behalf of your organization' selected, custodians do not have to consent when logging in. It makes life easier for them.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-OXMO32LX.png)

1. The Reveal Hold application is added and you will be signed in. However, since no roles have been set yet for Reveal Hold, you will be directed to the empty Custodian Portal.

Close this tab and continue with Step 2 below to assign roles to Reveal Hold.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-W51TKC6U.png)

## Assign Users and Roles to Reveal Hold

Microsoft Entra ID uses a concept called assignments to determine which users should receive access to selected apps. Decide which users and/or groups in Microsoft Entra ID need access to Reveal Hold. Once decided, you can assign these users and/or groups to Reveal Hold by following the instructions here. The following roles can be assigned to users: System Administrator, Global Hold Manager, Global Hold Viewer , Matter Manager, Matter Viewer and Custodian.

> [!NOTE]
> Note:
> 
> - At a minimum, assign one user (with an Microsoft Entra ID Application Administrator account) as System Administrator (to synchronize contacts) and one user as Global Hold Manager (to test sending preview emails).
> - Custodians do not require a role in the Microsoft Entra ID portal when the "User assignment required" is set to No. This is preferred. Users without a role assigned will only have access to the Custodian portal of Reveal Hold when added to a hold. If you need to restrict access to the custodian portal for specific users, then you can use the custodian role assignment.

1. Refresh the Enterprise applications section.
2. Search for 'Reveal Hold' and select the '**IPRO Reveal Hold**' application.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-CGM3ANO5.png)

1. Select the **1. Assign users and groups** tile.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-TKF4N5GD.png)

1. Select **+ Add user**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-EF9N3SQB.png)

1. Select **Users and groups**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-44087TWP.png)

1. In the right pane, select a user with an **Microsoft Entra ID Application Administrator** account, and click **Select** at the bottom.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-LY8TG0NY.png)

1. Select **Select a role**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-EYDSR0Z6.png)

1. In the right pane, select the System Administrator role, and click **Select** at the bottom.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-GS8761IO.png)

1. In the bottom left corner, select **Assign**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-K0MJM8FY.png)

1. Repeat step 4 to 9, but now assign a user with the Global Hold Manager Role.

> [!NOTE]
> **Note**
> 
> This user does not need to have an Microsoft Entra ID Application Administrator account.

## Synchronize Contacts

To ensure your contacts are kept up to date, follow the steps outlined in the [Address Book Synchronization](/reveal-hold-new/docs/address-book-synchronization-1) article to synchronize your contact list.

## Enable Sending Emails

In this section you'll learn how to enable Reveal Hold to send email messages on your behalf.

**Prerequisite**: You need a user with the Reveal Hold **Global Hold Manager** role. This user needs to have an **Office 365** license with **Exchange Online** element enabled. Please check this at Home > Users > "User with IPRO Reveal Hold **Global Hold Manager** role" > Licenses.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/integrate-with-microsoft-entra-id-image-odfq0q1w.png)

1. Go to [https://legalhold.one](https://legalhold.one/) (Depending on previous settings, you might have another domain, like .eu).
2. Log in with the user that has the Reveal Hold **Global Hold Manager** role.
3. In the top right user menu, you can navigate to Profile Settings.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-IX5LDA9S.png)

1. Click in the Email Preferences section on Enable, to enable email sending.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-TU1YZNWF.png)

1. Click **Accept** in the Permissions Requested pop-up to allow Reveal to send emails on your behalf.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-XSFCPVAT.png)

1. Now you can send a test message to check if Reveal Hold is able to send email messages. Click on Send Test Message.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-DNURO4VO.png)

1. Click **Yes** to send the message. Check your Inbox to see if the message has been sent.
2. Alternatively, as a Global Hold Manager, test sending emails using the email message preview option.
  1. In the menu on the left, select **Configuration >Message Templates**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-Y0L0SEVI.png)
  2. Select ![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-ATTOLNUB.png).
  3. Define a Name (for example, Test Message), Type, Subject and a write a bit of content. Click **Save** (bottom right corner).

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-YKNK0DYE.png)
  4. On the Message Templates page, select Preview Message Template.

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/integrate-with-microsoft-entra-id-image-2kagjs28.png)
  5. Select ![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-U83WWLBK.png).
  6. Select the user with the Reveal Hold **Global Hold Manager** role.
  7. Select **Accept.** The preview message has been sent.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-G6MEHR9K.png)

You have now learned how to integrate **Reveal Hold** with **Microsoft Entra ID.** You have synchronized your contacts and you have sent a preview message. All users with a **Global Hold Manager** role can now use Reveal Hold and start creating legal holds.

In this topic, you'll learn how to integrate Reveal Hold with Microsoft Entra ID. When you integrate Reveal Hold with Microsoft Entra ID, you can:

- Control in Microsoft Entra ID who has access to Reveal Hold.
- Manage your accounts in one central location - the Microsoft Entra ID portal.

## Add Reveal Hold from the Gallery

> [!NOTE]
> **Note**
> 
> To configure the integration of Reveal Hold into Azure AD, you need to add Reveal Hold from the gallery to your list of managed SaaS apps.

1. Sign in to the [Microsoft Entra ID portal](https://portal.azure.com/) with an Microsoft Entra ID subscription (Application Administrator account).
2. Select the **View** button beneath the **Manage Microsoft Entra ID** tile.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-2FGKA139.png)

1. Select the **Enterprise** applications section.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-IOHC32F8.png)

1. Select **+ New application.**

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-482EMN5V.png)

1. Search for 'Reveal Hold' and select the **Reveal Hold** tile.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-MHLTDUH4.png)

1. Select **Sign up for Reveal Hold** (bottom right corner).

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-YHIT6ZR1.png)

1. Select your Application Administrator account.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-4YSNE5OO.png)

1. Select **Consent on behalf of your organization** (recommended) and click **Accept**. With 'Consent on behalf of your organization' selected, custodians do not have to consent when logging in. It makes life easier for them.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-OXMO32LX.png)

1. The Reveal Hold application is added and you will be signed in. However, since no roles have been set yet for Reveal Hold, you will be directed to the empty Custodian Portal.

Close this tab and continue with Step 2 below to assign roles to Reveal Hold.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-W51TKC6U.png)

## Assign Users and Roles to Reveal Hold

Microsoft Entra ID uses a concept called assignments to determine which users should receive access to selected apps. Decide which users and/or groups in Microsoft Entra ID need access to Reveal Hold. Once decided, you can assign these users and/or groups to Reveal Hold by following the instructions here. The following roles can be assigned to users: System Administrator, Global Hold Manager, Global Hold Viewer , Matter Manager, Matter Viewer, and Custodian.

> [!NOTE]
> Note:
> 
> - At a minimum, assign one user (with an Microsoft Entra ID Application Administrator account) as System Administrator (to synchronize contacts) and one user as Global Hold Manager (to test sending preview emails).
> - Custodians do not need a role assigned in Entra ID. In the Entra admin center, open the IPRO LEGAL HOLD enterprise application and go to **Manage** > **Properties**. Make sure **Assignment required**? is set to **No** — this is the preferred setting. With it set to No, any user in your tenant can sign in to Legal Hold, and custodians will only see the Custodian portal once they are added to a hold. If you set it to Yes, only users you explicitly assign under Users and groups can sign in; use the Custodian role assignment if you need to restrict the Custodian portal to specific users.
> 
> ![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image (13).png)

1. Refresh the Enterprise applications section.
2. Search for 'Reveal Hold' and select the '**IPRO Reveal Hold**' application.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-CGM3ANO5.png)

1. Select the **1. Assign users and groups** tile.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-TKF4N5GD.png)

1. Select **+ Add user**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-EF9N3SQB.png)

1. Select **Users and groups**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-44087TWP.png)

1. In the right pane, select a user with an **Microsoft Entra ID Application Administrator** account, and click **Select** at the bottom.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-LY8TG0NY.png)

1. Select **Select a role**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-EYDSR0Z6.png)

1. In the right pane, select the System Administrator role, and click **Select** at the bottom.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-GS8761IO.png)

1. In the bottom left corner, select **Assign**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-K0MJM8FY.png)

1. Repeat step 4 to 9, but now assign a user with the Global Hold Manager Role.

> [!NOTE]
> **Note**
> 
> This user does not need to have an Microsoft Entra ID Application Administrator account.

## Synchronize Contacts

To ensure your contacts are kept up to date, follow the steps outlined in the [Address Book Synchronization](/reveal-hold-new/docs/address-book-synchronization-1) article to synchronize your contact list.

## Enable Sending Emails

In this section you'll learn how to enable Reveal Hold to send email messages on your behalf.

**Prerequisite**: You need a user with the Reveal Hold **Global Hold Manager** role. This user needs to have an **Office 365** license with **Exchange Online** element enabled. Please check this at Home > Users > "User with IPRO Reveal Hold **Global Hold Manager** role" > Licenses.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/integrate-with-microsoft-entra-id-image-odfq0q1w.png)

1. Go to [https://legalhold.one](https://legalhold.one/) (Depending on previous settings, you might have another domain, like .eu).
2. Log in with the user that has the Reveal Hold **Global Hold Manager** role.
3. In the top right user menu, you can navigate to Profile Settings.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-IX5LDA9S.png)

1. Click in the Email Preferences section on Enable, to enable email sending.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-TU1YZNWF.png)

1. Click **Accept** in the Permissions Requested pop-up to allow Reveal to send emails on your behalf.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-XSFCPVAT.png)

1. Now you can send a test message to check if Reveal Hold is able to send email messages. Click on Send Test Message.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-DNURO4VO.png)

1. Click **Yes** to send the message. Check your Inbox to see if the message has been sent.
2. Alternatively, as a Global Hold Manager, test sending emails using the email message preview option.
  1. In the menu on the left, select **Configuration >Message Templates**.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-Y0L0SEVI.png)
  2. Select ![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-ATTOLNUB.png).
  3. Define a Name (for example, Test Message), Type, Subject and a write a bit of content. Click **Save** (bottom right corner).

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-YKNK0DYE.png)
  4. On the Message Templates page, select Preview Message Template.

![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/integrate-with-microsoft-entra-id-image-2kagjs28.png)
  5. Select ![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-U83WWLBK.png).
  6. Select the user with the Reveal Hold **Global Hold Manager** role.
  7. Select **Accept.** The preview message has been sent.

![](https://cdn.us.document360.io/3e21d801-ca9f-4c51-93db-9cbd32741f3d/Images/Documentation/image-G6MEHR9K.png)

You have now learned how to integrate **Reveal Hold** with **Microsoft Entra ID.** You have synchronized your contacts and you have sent a preview message. All users with a **Global Hold Manager** role can now use Reveal Hold and start creating legal holds.