Description:
This step enables an existing Microsoft Entra ID user account.
The Enable EntraID User workflow step connects to Microsoft Entra ID (formerly Azure Active Directory) and enables a disabled user account within the configured tenant.
The step identifies the user by the specified User Principal Name (UPN) and re-enables the account, allowing the user to sign in and access assigned Microsoft Entra ID resources.
The step supports:
- Microsoft Entra ID user account enablement
- Configurable Entra ID connections
- User lookup by User Principal Name (UPN)
- Automated account activation
- Integration with Microsoft Graph through FlowWright connections
This step can be used for:
- Employee onboarding
- Employee reactivation
- Return-from-leave processes
- Contractor reactivation
- Identity lifecycle management
- User account administration
- Business process automation
Inputs
- entraIDConn - Select the Microsoft Entra ID connection configured in FlowWright.
- userName - Specify the User Principal Name (UPN) of the Microsoft Entra ID user account to enable.
Returns
- Enabled - The user account was successfully enabled.
- Not Enabled - The user account could not be enabled.
Usage:
The Enable EntraID User step is typically placed after an approval or verification step in a workflow that restores user access.

The workflow enables the specified Microsoft Entra ID user account using the configured connection.
Once the user account has been enabled, later workflow steps can:
- Assign Microsoft 365 licenses
- Add the user to security groups
- Send notification emails
- Resume employee onboarding
- Synchronize downstream systems
- Continue identity management processes
You need to set up an EntraID connection. Go to Integration > Connections > Generic Connections. On the Manage Generic Connections page, click Actions > Create. A sample connection is included here for reference.

Example:
Let’s build and execute the “clsEnableEntraIDUserDef” example:
- Create a new process definition named “clsEnableEntraIDUserDef” and open it in designer mode.
- Drag a “clsEnableEntraIDUser” step to the canvas.
- Connect the dots between the “Start” and “clsEnableEntraIDUser” steps.
- Click the "clsEnableEntraIDUser" step to configure its "Required" properties. Provide a name for the step. Select the EntraID connection from the drop-down list. Enter the “Username”. Click the Save button. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description.

- The “Logging” configuration is necessary for documentation and also measures workflow progress and percent complete. This is achieved by configuring the step state and percent fields individually, as shown below. Configure the “Logging” using the following properties.

- Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the Enable User step, FlowWright connects to the configured Microsoft Entra ID tenant and attempts to enable the specified user account. If the account is successfully enabled, the workflow follows the Enabled return path. If the user cannot be found, the account cannot be enabled, or the connection cannot be established, the workflow follows the NotEnabled return path.
Tips:
- Verify that the Microsoft Entra ID connection has been configured before using this step.
- Use workflow variables to dynamically specify the User Principal Name (UPN).
- Verify that the specified user account exists before attempting to enable it.
- Use this step as part of employee onboarding, rehire, or account recovery workflows.
- Use the Enabled and NotEnabled return paths to implement appropriate success and error handling.
- Combine this step with license assignment, group membership, or notification steps to fully automate user activation.
Notes:
- A valid Microsoft Entra ID connection must exist before this step can execute.
- The configured connection must have sufficient Microsoft Graph permissions to update user account status.
- The specified User Principal Name (UPN) must already exist in Microsoft Entra ID.
- Network connectivity or authentication issues may prevent successful account activation.
- Attempting to enable a user that is already enabled does not change the account state.
- The workflow should include appropriate error handling for the NotEnabled return path.
Definition Sample:
You may download the sample definition(s) from the link provided and later import them (drag-and-drop) into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.
Note: Verify and complete any missing configuration after importing the sample, including:
- Microsoft Entra ID connection
- Username mapping
- Workflow variable mappings
- Microsoft Graph permissions
- Environment-specific settings
After verifying the configuration, save the Process Definition before execution.
Click here to download the sample file.