People Movement Tracker

Settings

System configuration and management

System Users

Loading users...

▶

Microsoft Entra ID Authentication

✓ OAuth Integration Active

Setup Instructions

Follow these steps to configure Microsoft Entra ID (Azure AD) authentication:

Go to Azure Portal: Navigate to portal.azure.com and sign in
Register Application: Go to "Azure Active Directory" → "App registrations" → "New registration"
Configure App Registration:
- Name: "People Movement Tracker"
- Supported account types: Select appropriate option for your organization
- Redirect URI: Select "Web" and enter the callback URL below
Copy Tenant ID: From the app overview page, copy the "Directory (tenant) ID"
Copy Client ID: From the app overview page, copy the "Application (client) ID"
Create Client Secret:
- Go to "Certificates & secrets" → "New client secret"
- Add a description and choose expiration
- Copy the secret value immediately (it won't be shown again)
Set API Permissions: Go to "API permissions" → Add "Microsoft Graph" → Delegated permissions → Add "User.Read" and "email" permissions
Enter Configuration: Paste the Tenant ID, Client ID, and Client Secret into the form below

Redirect/Callback URLs (use either one):


                                            http://localhost:3000/auth/entra/callback


                                            http://localhost:3000/api/auth/entra/callback

Note: Both URLs are supported. In production, use: https://yourdomain.com/auth/entra/callback

Configuration Status

Environment variables must be set on the server

Not Configured

Entra ID authentication is configured using environment variables. Set these on your server:

ENTRA_TENANT_ID

Not Set

ENTRA_CLIENT_ID

Not Set

ENTRA_CLIENT_SECRET

Not Set

ENTRA_REDIRECT_URL

Not Set

How to Configure:

Create a .env file in the project root with:

ENTRA_TENANT_ID=your-tenant-id-here
ENTRA_CLIENT_ID=your-client-id-here
ENTRA_CLIENT_SECRET=your-client-secret-here
ENTRA_REDIRECT_URL=https://yourdomain.com/auth/entra/callback

Then restart the server for changes to take effect.

▶

Microsoft Graph Integration

Sync employee directory from Azure AD/Microsoft 365

Configuration Status

Environment variables must be set on the server

Not Configured

Microsoft Graph integration allows automatic syncing of employee data from Azure AD. Set these environment variables on your server:

MSGRAPH_TENANT_ID

Not Set

MSGRAPH_CLIENT_ID

Not Set

MSGRAPH_CLIENT_SECRET

Not Set

Sync Settings (Editable)

Username Filter (Include) Supports wildcards: * (all), john* (prefix), *@domain.com (domain), user1,user2 (multiple)

Username Filter (Exclude) Exclude usernames matching these patterns, even if they match the include filter. Leave empty to exclude no one.

Sync Interval (hours) How often to automatically sync employee data. Note: Server restart required for schedule to update.

How to Configure:

Create a .env file in the project root with:

MSGRAPH_TENANT_ID=your-tenant-id-here
MSGRAPH_CLIENT_ID=your-client-id-here
MSGRAPH_CLIENT_SECRET=your-client-secret-here
MSGRAPH_USERNAME_FILTER=*
MSGRAPH_SYNC_INTERVAL_HOURS=24

Then restart the server for changes to take effect.

Username Filter Examples: * (all users), john* (starts with john), *@company.com (domain), user1,user2 (multiple)

▶

Birthday & Anniversary Bulk Import

Import birthdays and work anniversaries from a CSV file. Employees are matched by email address.

Upload CSV File

Download a template CSV file with example data

Select CSV File:

CSV Format Requirements:

Columns: email, birthday, anniversary
Email: Must match an existing employee in the directory
Birthday: Format as MMDD (e.g., 0315 for March 15th)
Anniversary: Format as MMDDYYYY (e.g., 03152020 for March 15, 2020)

Example CSV:

email,birthday,anniversary
john.doe@company.com,0315,03152020
jane.smith@company.com,1225,12252018

System Information

Application Version

v1.0.0

Database

SQLite

Node.js Version

Uptime

Total Employees

Total Movements

Total Positions

Database Size

Change Password

Movement Records Management

View and delete movement records. Use caution when deleting - this action cannot be undone.

Click Refresh to load movement records...

Audit Log Retention

Configure how long audit logs are retained in the system. Older logs will be automatically cleaned up.

Manual Cleanup

Manually trigger cleanup of audit logs based on current retention settings.

Current retention: Loading... days

Logs older than this will be deleted

Audit Log Statistics

Total Audit Logs

Last Cleanup

Never

Settings

System Users

Microsoft Entra ID Authentication

Setup Instructions

Configuration Status

Microsoft Graph Integration

Configuration Status

Birthday & Anniversary Bulk Import

Upload CSV File

System Information

Change Password

Movement Records Management

Audit Log Retention

Manual Cleanup

Audit Log Statistics

Total Audit Logs

Last Cleanup

Add System User