Getting Onboarded

Licensing

For full access to all Alira features, your tenant should have one of the following Microsoft licence SKUs:

Security — required roles

Entra resources needed per feature

Alira surfaces three core functions — Applications, Request, and Manage. Each draws from specific Entra resources:

Sign in and create your workspace

1. Navigate to alira.kocho.co.uk and click Sign in with Entra ID
2. Sign in with your Entra account and complete any MFA requirements
3. If this is your first login, you’ll see an OAuth Permissions Request. If you’ll be adding members to the app, tick Consent on behalf of your organisation before approving. You must hold an Application or Global Administrator role to do this.
4. Once signed in, click Create Workspace
5. Enter your desired Workspace Name and click Create Workspace

Create the App Registration

1. In Alira, go to Settings → Sync
2. Click Create App Registration
3. A pop-up will appear — select the appropriate tenant from the Select Tenant dropdown
4. Click Create App Registration to confirm

Configure the App Registration and grant consent

After clicking Create you’ll be redirected to your Entra tenant to complete the setup.

1. In the Entra Portal, go to Identity → Applications → App registrations
2. Select All applications and sort by Created on
3. Find the newly created App Registration named Alira Resource Sync (DATE) and click on it
4. Go to API permissions
5. Click ✔ Grant admin consent for {Tenant Name}
6. Click Yes to confirm — the status for all API permissions will turn green

Enable Resource Synchronisation

1. Return to Alira and go to Settings → Sync
2. Toggle Resource Synchronisation on
3. Click Save

What are Collections?

Go to Access Portal → Resources → Collections to see the default Collections created for you. You can use these as-is or create your own.

Creating and editing a Collection

1. Go to Access Portal → Resources → Collections and click Create Collection
2. Enter a Name and Description for the collection
3. Set the Type — either Access or Software
4. Toggle Enabled if you want the collection visible immediately, or leave it off to populate it first
5. Click Create Collection

Editing a Collection

1. Click on any Collection to open it
2. In the Basic Information section, click Edit to update the name, description or type
3. Under Resources, mass-add or remove resources from the collection
4. Update the Collection Icon with a relevant image to help users navigate

Create the SCIM Application

1. In Alira go to Administration → Settings → SCIM
2. Click Create SCIM App
3. Select the appropriate tenant from the Select Tenant dropdown
4. Optionally customise the Application name
5. Click Create SCIM Application
6. You’ll be redirected to authorise your OAuth credentials. Click Open in Azure Portal to go to the Enterprise Application
7. In the Enterprise Application, click Provisioning and then Test Connection to confirm the connection is successful

Assign users and groups to Alira

1. In Entra go to Identity → Enterprise Applications → (your SCIM app name)
2. Go to Users and Groups and click Add user/group
3. Under Users and Groups click None Selected and choose the users or groups you want to add to Alira
4. Under Select a role click None Selected and assign the appropriate Alira role
5. Click Assign
6. To test provisioning before going live, go to Provisioning → Provision on Demand, select a test user or group, and click Provision
7. A success page will confirm the attributes synced. Then check Alira → Administration → Members to see the provisioned user
8. When ready to go live, return to Provisioning on the Enterprise Application and click Start provisioning