MeCard × Microsoft Entra ID
Company Admin A–Z guide
A simple setup and employee management guide, with screenshots of the actual MeCard screens.
Before you start
Microsoft Entra ID controls employee identity and Security Group membership. Your Company Admin approves MeCard accounts, purchased digital-card profiles and Microsoft data updates.
1. First-time setup
Prepare your Microsoft employee group
Ask Microsoft IT to approve your company’s application connection and one or more existing or new Microsoft Entra Security Groups. Add eligible staff as direct members. Microsoft IT controls consent and the approved employee fields.
Employees in any approved group count once. Nested groups are not automatically expanded.
Open Connect Microsoft
Sign in as the Company Owner/Admin at my.mecard.my, then open Account Settings → Connect Microsoft.
Complete Microsoft IT approval
Use Verify & Choose Groups if the approved connection already exists. Where Request IT Approval is offered, send the private one-use link to Microsoft IT (valid for 30 minutes). If a connection is not ready, ask MeCard Support and Microsoft IT to approve the app/tenant setup.
Company Admins never need to enter their IT administrator’s Microsoft password or an app secret into the MeCard form.
Select your eligible employee groups
Choose the approved group names, select Review Employee Groups, confirm the number of unique eligible employees, then select Finish Setup. Choosing groups does not create any MeCard users or digital cards.
Approve employees and allocate cards
Open Microsoft → Azure Employees, then select Refresh Employees. Select Pending employees, choose Assign Cards, select the purchased profile count, and review/link the Team Member and cards.
For multiple profiles, choose each card’s market, business role, language and one source language per role. Existing verified MeCard accounts can be linked after your approval.
Choose the employee login method
Open Microsoft → Login Method. Start with SSO + MeCard Password while confirming employee sign-in. Use Microsoft SSO Only only after identity verification and Company Owner recovery requirements are satisfied.
Employee sign-in: Provide each approved employee with your organization’s Company Code. On my.mecard.my, the employee enters that code and chooses Login With Microsoft, then signs in through Microsoft. Ask MeCard Support if you do not know your Company Code.
Approve the Microsoft attributes and first sync
In Azure Employees → Company-wide default fields, select approved Microsoft source attributes. If needed, add market/role-specific overrides. Then open Microsoft → Employee Sync, Verify connection → Generate preview → Approve the before/after changes. Sync Now runs an approved on-demand update.
Automatic updates operate only when your company has an approved mapping and its authorized synchronization service is enabled.
2. Manage employees
Add an employee
IT adds the employee to an approved Security Group. Company Admin selects Refresh Employees, reviews the Pending account, and approves Team Member/card allocation.
Change a job title or department
IT updates the approved Microsoft field. MeCard updates only approved, mapped source-language cards; existing translations remain unchanged until reviewed.
Change profiles or languages
Use approved card allocation. Advanced Azure Mapping is available for exact role/field destinations and changes to an existing profile setup.
Pause or resume updates
Use Employee Sync controls. Changing Security Groups pauses information publication until you review and approve the new configuration.
Remove a departing employee & Automatic Reuse Card
IT removes the employee from all approved Security Groups. After a complete verified membership refresh, access is revoked. For an eligible Azure-created internal Team Member, Automatic Reuse Card safely cleans and releases the primary card once cleanup is complete.
- The retained primary card preserves its card ID and original URL/QR target; personal and former-employee details are cleared.
- Additional language cards are removed; only the primary card becomes available for reuse.
- Company Admin can approve a new employee’s allocation using the available primary card.
- Manually linked existing accounts are not automatically deleted or recycled.