Step 4: Provision users and groups from Microsoft Entra