BitaBIZ integration with Microsoft Entra ID (AD)
Automatic user management, secure login, and full synchronization.
With BitaBIZ’s integration to Microsoft Entra ID (Active Directory), you get a complete, automated solution for user management and secure access control. The integration’s features optimize the entire employee journey — from onboarding to offboarding — ensuring more efficient and secure operations.
Benefits of the integration
Automated user management
Automatic onboarding and offboarding of employees from your Entra ID to BitaBIZ
No manual creation or deactivation of users
Less administrative work and fewer errors
Automatic synchronization of master data
BitaBIZ is automatically updated with employee data from your Entra ID
Master data such as job title, department, mobile number, manager, etc. are continuously synchronized
Consistent and always up-to-date data across systems
Easy and secure access (Single Sign-on)
Access BitaBIZ with one click directly from Microsoft 365
Single Sign-on (SSO) from mobile app, web portal, and Microsoft 365
Employees log in with their existing Microsoft account — no extra password needed
How to set up the integration
Download the BitaBIZ enterprise Entra ID application from Microsoft Market Place
🔗 Click here!Follow the installation guides in the FAQ below.
Good to know
ℹ️ Login via Entra ID
Once the BitaBIZ Entra ID application is installed and configured, employees log in to BitaBIZ with their existing Microsoft Entra ID password.
ℹ️ Automatic synchronization of employee data
When Provisioning is enabled, master data is continuously synchronized from your Entra ID to BitaBIZ.
Employees are automatically on-boarded and off-boarded, with no manual handling required.
FAQ
How to set up integration with Microsoft Active Directory (Entra ID)
How to set up integration with Microsoft Active Directory (Entra ID)
BitaBIZ has a pre-configured Entra ID (Active Directory) app. It is used to integrate your BitaBIZ account with Microsoft 365.
The app is used to set up the following BitaBIZ integrations:
➡️ Single sign-on (SSO)
➡️ Automatic user management (master data is synchronized to BitaBIZ)
Guide to adding the BitaBIZ Application to your Entra ID
1. Log in to Microsoft Entra ID.
2. Select Enterprise Applications from the Manage section.
3. Select All applications -> + New application.
4. Do the following:
Type BitaBIZ in the search field
Select BitaBIZ from the results list
Click Create to add the BitaBIZ application to Entra ID Active Directory.
ℹ️ The BitaBIZ enterprise application is now added to your Entra ID (Active Directory)!
💁 Once the app is installed, it needs to be configured for the integrations your company wants to use.
Follow these Microsoft installation guides:
When we enable user provisioning, how does the automatic user management work?
When we enable user provisioning, how does the automatic user management work?
When BitaBIZ is integrated with your Entra ID and user provisioning is enabled for the integration, your employees are automatically on-boarded and off-boarded to/from BitaBIZ via your Entra ID.
There is a user management process in BitaBIZ that needs to be handled for both onboarding and offboarding of employees when the integration is active.
It’s important that our guides for onboarding and offboarding are followed by your HR / Administration team:
Which master data fields for our employees can be automatically created in BitaBIZ?
Which master data fields for our employees can be automatically created in BitaBIZ?
When you set up and enable provisioning, all supported user master data attributes will by default be synchronized with BitaBIZ.
The following attributes are supported:
Entra ID AD attribute | BitaBIZ master data |
userPrincipalName | Username |
givenName | First name |
surname | Last name |
jobTitle | Job title |
department | Department |
manager | Direct approver |
Not(IsSoftDeleted) | Active |
userPrincipalName | |
mobile | Mobile number |
telephoneNumber | Phone (office) |
country | Country/region/calendar group |
employeeHireDate* | Date of employment |
employeeId* | Payroll number (for payroll file) |
custom attribute* | Employee number |
custom attribute* | Group company |
💁 The four attributes marked with * can be synchronized to BitaBIZ, but must be added manually in the mapping in Entra ID.
We recommend using “employeeHireDate” and “employeeId” in Entra ID for date of employment and payroll number in BitaBIZ.
Custom attributes in Entra ID can be used for employee number and group company.
The following attributes are mandatory:
Entra ID AD attribute | BitaBIZ master data |
userPrincipalName | Username |
givenName | First name |
surname | Last name |
Not(IsSoftDeleted) | Active |
userPrincipalName |
💁 The attributes in the table above must not be deleted from the provisioning mapping.
How do I add an attribute for synchronization?
How do I add an attribute for synchronization?
Go to the Provisioning section in your BitaBIZ Enterprise application:
Click: Provisioning → Mappings → Provision Microsoft Entra ID users
Under the Attribute mapping section, click: Add New Mapping
In this example, we want to add the employee's department, "department", to the synchronization
Under Edit Attribute select:
Source attribute (the attribute on the user profile in Entra ID)
Target attribute (the attribute on the user profile in BitaBIZ)
Click OK
(keep the other settings as shown in the setup)
Click Save at attribute mapping
💁 The mapping is now saved, and the attribute will be synchronized with BitaBIZ.
Add a custom attribute
If you want to synchronize a custom attribute (date of employment, payroll number, employee number, or group company), the BitaBIZ attribute must first be added to the attribute list.
The attributes that are transferred to the master data card in BitaBIZ are added in Entra ID with the following names:
BitaBIZ master data | BitaBIZ Attribute | Microsoft Entra ID Attribute |
Date of employment | dateOfEmployment | employeeHireDate |
Payroll number | payrollNumber | employeeId |
Employee number | employeeNumber | custom attribute |
Group company | groupCompanyName | custom attribute |
The attributes are added on the Attribute Mapping page:
Click Show advanced options → Edit attribute list
Add the desired BitaBIZ custom attribute to the list
Note that "dateOfEmployment" should be set as "DateTime" in Type.
Then create the mapping via Add New Mapping as described above with the corresponding custom Entra ID attribute, and click Save.
In this example, it is assumed that the custom Entra ID attribute matching "payrollNumber" is "employeeId".
How do I remove an attribute from synchronization?
How do I remove an attribute from synchronization?
Go to the Provisioning section in your BitaBIZ Enterprise application:
Click: Provisioning → Mappings → Provision Microsoft Entra ID users
Under the Attribute mapping section, click Delete next to the attribute you do not want to synchronize with BitaBIZ
In this example, we want to remove the synchronization of direct approver, "manager".
Click Save at attribute mapping
💁 The mapping is now saved, and the attribute will no longer be synchronized with BitaBIZ.
What happens when the manager approval flow from Entra ID (Active Directory) is enabled in your BitaBIZ app?
What happens when the manager approval flow from Entra ID (Active Directory) is enabled in your BitaBIZ app?
When you enable the approval flow from Entra ID (Active Directory) to BitaBIZ by synchronizing the Manager attribute, the approval flow in your BitaBIZ account will automatically be synchronized 1:1 with the manager structure in Entra ID.
This means that groups and departments in BitaBIZ are not used as the primary basis for the approval flow.
How the synchronization works
1. Manager role from Entra ID → Approver role in BitaBIZ
All employees marked as Manager in Entra ID are automatically assigned the Approver role in BitaBIZ.
2. Employees automatically get their Entra ID manager as approver in BitaBIZ
BitaBIZ automatically assigns the employee's manager from Entra ID as their direct approver in BitaBIZ.
The approver is shown on the employee's profile under:
Roles > Approved by
Expanding the approval flow in BitaBIZ
You can choose to expand the approval flow in BitaBIZ, even if the Entra ID approval flow is active.
Add department approvers
You can add approvers who are not managers in Entra ID, but who should approve for specific groups or departments in BitaBIZ.
How to add a department approver:
Open the employee profile
Go to Roles
Check Approver under the Department rights section
Select the Groups/Departments the employee should approve for under the Is approver for section
Click Save employee
💁 If an employee should only be approved by their Entra ID manager, you can select this option.
Check "The employee should only be approved by the selected approver from the list" under the Roles > Approved by section
When this setting is selected, any added department approver will not be assigned as an approver for the employee.
Self-approver role
If an employee should not have an approver to handle requests in BitaBIZ—but the employee has a manager in Entra ID—you can make the employee a Self-approver.
This means:
✔ The approval flow from Entra ID is ignored for this employee
✔ The employee approves their own requests
The self-approver role is activated by selecting Self-approver under the Approved by section on the employee's profile:
Roles in BitaBIZ
For more information about the approver role and other roles in BitaBIZ.
How to Renew the Single Sign-On Certificate (SAML Certificate)
How to Renew the Single Sign-On Certificate (SAML Certificate)
When your Single Sign-On certificate expires, it needs to be renewed in both Entra ID (Azure Active Directory) and your BitaBIZ configuration.
Follow this guide to complete the renewal correctly.
During the rollout of the certificate and the update in BitaBIZ, there will be a short period where users cannot log in. Therefore, plan the update outside of peak hours.
Step-by-Step: Renew the SSO Certificate in Entra ID
1. Open your BitaBIZ Enterprise application in your Entra ID
Go to the Entra ID Portal and navigate to the Enterprise application used for your BitaBIZ SSO integration.
2. Go to Single Sign-On
In the application's left menu, select Single sign-on.
3. Edit SAML Certificates
Find the SAML Certificates section and click Edit.
4. Create a New Certificate
Click + New Certificate, select an expiration date of up to 3 years, and then click Save.
5. Activate the New Certificate
Click the three dots icon next to the newly created certificate and select Make certificate active.
This will automatically switch from the old to the new certificate.
6. Download the Base64 Certificate
Download the Certificate (Base64) file.
7. Copy the Certificate Content
Open the certificate in Notepad or another text editor.
Copy the entire content – including:
-----BEGIN CERTIFICATE-----
...certificate data...
-----END CERTIFICATE-----
Log in to BitaBIZ as Setup admin
Go to Setup admin → Integration → Microsoft Entra ID SSO
Paste the certificate text into the SSO configuration
Click Save Entra ID SSO
The new certificate is now active in your BitaBIZ solution.
How Does Entra ID (AD) Manage Your Users in BitaBIZ?
How Does Entra ID (AD) Manage Your Users in BitaBIZ?
Creating, updating, and deleting users via SCIM provisioning
Introduction
This FAQ explains how your Entra ID (AD) automatically manages users in BitaBIZ through SCIM provisioning. Here you get an overview of what happens when a user is created, updated, suspended (soft delete), or permanently deleted (hard delete) in Entra ID, and how these changes affect the user's profile, access, and data history in BitaBIZ.
BitaBIZ SCIM Request Schema
Attribute Mapping Between BitaBIZ and Entra ID (AD)
BitaBIZ Master Data | BitaBIZ Attribute | Create – New User | Patch – Update User |
(blank) | id | Y | N |
(blank) | externalId | N | N |
Last Name | name.familyName | Y | Y |
First Name | name.givenName | Y | Y |
LoginName | userName | Y | Y |
Job Title | jobTitle | Y | Y |
Department | department | Y | Y |
Approved by | manager | Y | Y |
Mobile Number | phoneNumbers[type eq "mobile"].value | Y | Y |
Phone (office) | phoneNumbers[type eq "work"].value | Y | Y |
emails[type eq "work"].value | Y | Y | |
Country / Region | addresses[type eq "work"].country | N | Y |
Date of Employment | dateOfEmployment | Y | Y |
Payroll Number | payrollNumber | Y | Y |
Employee Number | employeeNumber | Y | Y |
Group Company | groupCompanyName | Y | Y |
Create User
When a user is added to the BitaBIZ Enterprise application in Entra ID (AD), the user is created or updated in BitaBIZ:
The user is created in BitaBIZ with email, first name, and last name.
Additional attributes selected for synchronization are also updated (e.g., department, manager, job title, mobile number, office phone).
If the user already exists from a previous Excel import, the profile is automatically updated with data from Entra ID.
Note:
If the user was previously soft-deleted via provisioning, the user will be reactivated — including historical data.
Update User
When you make changes to a user profile in Entra ID (AD), the user's profile is automatically updated in BitaBIZ.
The following attributes are updated:
First Name
Last Name
Job Title
Department
Manager
Mobile Phone
Office Phone
Email / Username
Country
Hard Delete
When a user is permanently deleted from Entra ID (AD), the user is hard deleted in BitaBIZ.
With a hard delete:
The user is marked as inactive with today's date as the termination date
The user loses access to BitaBIZ
Email/username is deleted in BitaBIZ
A new user with the same email can be created again
If a user with the same email is recreated in Entra ID, a new unique user will be created in BitaBIZ
Note:
Manually deactivating a user in BitaBIZ follows the same rules as hard delete.
Soft Delete
When a user is suspended or removed from provisioning in Entra ID (AD), the user is soft deleted in BitaBIZ.
With a soft delete:
The user is marked as inactive with today's date as the termination date
The user loses access
Email/username is not deleted
A new user with the same email cannot be created
If the user is reactivated in Entra ID, the user is reactivated in BitaBIZ — including history
How Do We Move Employees to a New Microsoft Entra ID (AD) Tenant?
How Do We Move Employees to a New Microsoft Entra ID (AD) Tenant?
How to handle the move when Single Sign-on and Provisioning are enabled in BitaBIZ.
Introduction
If your organization moves employees to a new Microsoft Entra ID (AD) tenant and you are already using Single Sign-on (SSO) and SCIM provisioning in BitaBIZ, you will need to set up the integrations again on the new tenant.
Here you will find an overview of what to do in two typical scenarios:
employees get a new email address, or
employees keep the same email address.
Scenario 1: Employees Move to a New Entra ID Tenant and Get a New Email Address
In this scenario, you need to set up a completely new SSO and Provisioning integration on the new Entra ID tenant.
Do the Following:
1. Deactivate Provisioning on the Old Microsoft Tenant
Open Entra ID Active Directory → Enterprise applications
Select the BitaBIZ Enterprise application
Go to Provisioning
Click Stop provisioning
2. Deactivate Single Sign-on in BitaBIZ
Go to Setup admin → Integrations
Turn off Single Sign-on under the Microsoft Entra ID AD SSO section
3. Update Employees' New Email Addresses in BitaBIZ
Go to Setup admin
Click Edit next to the employee
Update the new email address
Click Save employee
4. Set Up the SSO and Provisioning Integration on the New Entra ID Tenant
See the FAQ How to set up integration with Microsoft Active Directory (Entra ID) in this article.
Scenario 2: Employees Move to a New Entra ID Tenant and Keep the Same Email Address
In this scenario, the process is a bit simpler since the email address does not need to be changed in BitaBIZ.
You still need to set up a new SSO and Provisioning integration on the new tenant.
Do the Following:
1. Deactivate Provisioning on the Old Microsoft Tenant
Open Entra ID Active Directory → Enterprise applications
Select the BitaBIZ Enterprise application
Go to Provisioning
Click Stop provisioning
2. Deactivate Single Sign-on in BitaBIZ
Go to Setup admin → Integrations
Turn off Single Sign-on under the Microsoft Entra ID AD SSO section
3. Set Up the Integration on the New Entra ID Tenant
See the FAQ How to set up integration with Microsoft Active Directory (Entra ID) in this article.
Setting up Single Sign-on (SSO) and Provisioning for Multiple Companies in Microsoft Entra ID
Setting up Single Sign-on (SSO) and Provisioning for Multiple Companies in Microsoft Entra ID
Introduction
If your Microsoft Entra ID (AD) includes multiple companies, and each company has its own BitaBIZ account, SSO and Provisioning must be set up for each company.
This guide shows you how to handle the setup correctly, so each employee only gets access to the right BitaBIZ account.
How SSO and Provisioning Work Per Company
1. Install the BitaBIZ app once per company
Each company must have its own BitaBIZ Enterprise app in Microsoft Entra ID.
2. Create one AD group per company
The AD group defines which employees:
can log in via SSO
are synchronized via Provisioning
belong to that specific company's BitaBIZ account
3. Add the AD group to the company's BitaBIZ Enterprise app
Only users in the group will have access to the company's BitaBIZ account.
4. End Result
Each BitaBIZ account is isolated to its company
Users only have access to their own company's data
Login and synchronization are managed automatically via Entra ID
Summary
With this setup, each company gets a clear and secure separation, while employees can log in and be synchronized correctly via Entra ID.
Function | Setup per company | Managed by AD group |
Single Sign-on (SSO) | ✔ Yes | ✔ Yes |
Provisioning | ✔ Yes | ✔ Yes |
Troubleshooting: SSO and Provisioning between Microsoft Entra ID (Active Directory) and BitaBIZ
Troubleshooting: SSO and Provisioning between Microsoft Entra ID (Active Directory) and BitaBIZ
This troubleshooting guide helps you identify and resolve the most common issues related to Single Sign-On (SSO) and Provisioning (SCIM) between Microsoft Entra ID and BitaBIZ.
The guide covers:
Provisioning errors
SSO login issues
Missing approver flow
Synchronization issues after changes in Entra ID
Technical claim conflicts
Quick Guide to Troubleshooting:
Problem | Quickest Solution |
User missing | Provision on demand |
User data not updating | Restart provisioning |
SSO not working | Check app assignment or NameID claim |
Error after email change | Change NameID to user.mail |
Error on shared PC | Clear cache / incognito |
Missing approver | Check manager in Entra ID |
1. Users are not created in BitaBIZ
✔ Check if the user is added to the BitaBIZ Enterprise application in your Entra ID
Provisioning only happens for users and groups added to the BitaBIZ enterprise application in your Entra ID.
How to check:
Enterprise applications → BitaBIZ → Users and groups
✔ Check if the user has a valid Microsoft 365 license
Users without a license are not provisioned correctly.
✔ Perform “Provision on demand”
Force-sync a single user:
BitaBIZ app → Provisioning → Provision on demand
2. User data is not updating in BitaBIZ
✔ Check that Provisioning Mode = Automatic
In Entra ID → Provisioning.
✔ Check that the fields in Entra ID have actually been changed
Missing or invalid values prevent updates.
✔ Restart provisioning
Provisioning → Overview → Restart provisioning
Starts a full resynchronization of all added users.
3. User does not get the correct approver in BitaBIZ
✔ Check if the user has a manager in Entra ID
The approver flow depends directly on the Manager field in Entra ID.
✔ Check if the manager is also provisioned
The manager must exist in BitaBIZ before the approver flow can be synchronized.
✔ Check if the user is Self-approver in BitaBIZ
If the Self-approver role is assigned, the manager approver flow from Entra ID is ignored.
4. User is not deactivated in BitaBIZ
✔ The user must be removed from the app assignment
Deactivation in Entra ID alone is not enough.
✔ Check Provisioning Logs
Shows if the deactivation fails.
✔ Check if the user has an active SSO session
May cause the user to appear active for a short time.
5. Error messages in Provisioning Logs
❌ Insufficient privileges
Give the BitaBIZ application API permissions: User.ReadWrite.All
❌ Duplicate attribute value
Usually because a user with the same email already exists in BitaBIZ.
❌ Schema mismatch
Entra ID fields are missing or contain invalid values.
6. Provisioning is running very slowly
Provisioning runs in batches at Microsoft.
A full cycle can take up to 40 minutes.
For faster synchronization:
Provision on demand (single user)
Restart provisioning (all users)
7. SCIM token needs to be regenerated
If provisioning continues to fail:
Go to Setup admin → Integration → Microsoft Entra ID Provisioning in BitaBIZ
Generate a new SCIM/Bearer token
Enter it in Entra ID
Restart provisioning
8. Some users cannot log in with SSO
There are typically two reasons:
Reason 1: The user is not assigned to the SSO application in Entra ID
If the BitaBIZ application requires “Assignment required”, the user can only log in if they are:
a member of an AD group assigned to the app, or
assigned directly
✔ Solution
The IT administrator must assign the user access to the BitaBIZ SSO application.
Reason 2: Multiple users trying SSO on the same PC
BitaBIZ only supports one active SSO session per PC/browser.
✔ Solution
Log out the current user from BitaBIZ, or
Clear browser cache, or
Use an incognito window
This will free up the session.
9. SSO stops working after changing email in Entra ID
Use case
You change a user's email in Entra ID
The new email is correctly synchronized to BitaBIZ
The user suddenly cannot log in with SSO
Reason
BitaBIZ uses email as the unique identifier in SSO.
If the user has different UPN and email, SSO can mismatch.
Example:
✔ Solution: Change NameID claim to user.mail
How to do it:
Open the BitaBIZ Enterprise application in Entra ID
Go to Single sign-on
Click Edit in Attributes & Claims
Under Required Claim, change
Unique User Identifier (Name ID)
→ to user.mailSave
After this, the user will be able to log in again.
What should we do in BitaBIZ when our organization changes domain in Microsoft Entra ID? Users get new UPN and email address in our Entra ID?
What should we do in BitaBIZ when our organization changes domain in Microsoft Entra ID? Users get new UPN and email address in our Entra ID?
What you need to do in BitaBIZ depends on whether you have enabled the Provisioning integration (SCIM 2.0) or only Single Sign-On (SSO).
The two scenarios are described below.
Scenario 1: You have enabled the Provisioning integration
If the Provisioning integration is enabled, everything runs automatically – no action is needed.
Our Provisioning integration automatically synchronizes the changes to employees in BitaBIZ. This means:
New UPN and new email address are automatically updated for users in BitaBIZ
Employees keep their access, data, and roles
No duplicate users are created
No manual changes are needed
Going forward, employees log in to BitaBIZ via Single Sign-On with their new email address
This is the simplest and recommended setup when changing domains.
Scenario 2: You have not enabled Provisioning, only Single Sign-On
If Provisioning is not enabled, employees' new email addresses must be updated manually in BitaBIZ before SSO will work correctly again.
Follow this procedure:
1. Temporarily disable Single Sign-On
Go to:
Setup admin → Integrations → Microsoft integrations
Under "Microsoft Azure AD SSO":
Uncheck "Enable Azure SSO" and click "Save Azure AD".
2. Update employees' email addresses
Go to:
Setup admin → Employees → Edit employee
Enter the new email address and click "Save employee".
(Repeat for all relevant employees.)
3. Enable Single Sign-On again
Go back to the SSO setup and enable "Enable Azure SSO".
4. Employees now log in with the new email address
Once SSO is re-enabled, employees must use their new email address to log in to BitaBIZ.
We have a new HR system and want to change which master data is synchronized to BitaBIZ. How do we do that?
We have a new HR system and want to change which master data is synchronized to BitaBIZ. How do we do that?
If your company has a new HR system, you can choose which master data should be synchronized to BitaBIZ via your Microsoft Entra ID integration.
It is possible to synchronize the following master data to BitaBIZ:
First name (mandatory – must not be removed)
Last name (mandatory – must not be removed)
Email (mandatory – must not be removed)
Job title
Department
Direct approver
Mobile number
Phone (office)
Country / region / calendar group
Date of employment
Payroll number (used in the payroll file)
Employee number
Group company
Master data that is not mandatory is optional. You can choose which fields to synchronize by adding or removing them in the integration.
How do we remove users from the SSO/Provisioning integration with BitaBIZ?
How do we remove users from the SSO/Provisioning integration with BitaBIZ?
This FAQ explains how to remove users from the Microsoft SSO/provisioning integration with BitaBIZ.
BitaBIZ supports SSO/provisioning integration with one Microsoft Entra ID tenant per BitaBIZ account.
If some users are moved to another Microsoft Entra ID tenant but still need to be active on your current BitaBIZ account, follow the steps below to remove these users from the SSO/provisioning integration in BitaBIZ.
Step 1: Update users' primary SMTP email addresses in your Microsoft Entra ID
If users get new email addresses when they are moved to a new Microsoft Entra ID tenant, you must first update their new primary SMTP email addresses in your current Microsoft Entra ID tenant.
If there are no changes to the users' current email addresses, you can skip this step and go straight to step 3.
Step 2: Provision users from your current Microsoft Entra ID to BitaBIZ
💁 Log in to your current Microsoft Entra ID and go to your BitaBIZ enterprise application.
Go to the "Provisioning" section in your BitaBIZ enterprise application.
Click: Restart provisioning
ℹ️ This will update the users' new email addresses in your BitaBIZ account.
💁 Make sure the users' email addresses are updated in BitaBIZ before moving on to step 3.
Step 3: Remove users from the BitaBIZ enterprise application in your Microsoft Entra ID
Go to the "Users and Groups" section in your BitaBIZ enterprise application in your current Microsoft Entra ID.
Remove users from the BitaBIZ enterprise application.
(If users are assigned to the enterprise application via an AD group, simply remove the users from the AD group and they will automatically be removed from the enterprise application).
ℹ️ When users are removed from the BitaBIZ enterprise application in your Microsoft Entra ID, they will be made inactive in BitaBIZ at the next provisioning.
💁 Make sure the users are inactive in BitaBIZ before moving on to step 4.
Step 4: Contact BitaBIZ
Contact our online support and ask to speak with a human.
When you contact support, please provide the following:
The employee's current email address in BitaBIZ
Error code: AD7.
Support will then:
Remove the employee's AD user role from the inactive profile in BitaBIZ.
Step 5: Manually activate users in BitaBIZ
💁 Once BitaBIZ has removed the AD role from the users, you can now manually activate the users in your BitaBIZ account.
Log in to your BitaBIZ account
Go to Setup admin > Employees > Click: Show inactive employees
Click: Edit next to the user profile
Click: Activate user
ℹ️ The user is now active in BitaBIZ
Step 6: The user must create a new BitaBIZ password
💁 Before users can log in to BitaBIZ, they need to create their own new BitaBIZ password.
See the FAQ "I forgot my password. What do I do?" in this article for how to create a new BitaBIZ password.
ℹ️ Once users have created their new BitaBIZ password, they can log in to BitaBIZ.