What data syncs, and how often

A connected Microsoft 365 tenant syncs six things: subscribed licences into Licences, directory users into People (guest accounts are left out), Intune-managed and Entra-registered devices into Hardware, app-registration secrets and certificates plus enterprise-app credentials (SAML signing certificates included) into the Certificates section's App Credentials tab, Entra groups that assign licences or contain synced devices into the read-only Groups view, and MFA-registration and risky-user signals used by the Security page. Licences also take their start date and next renewal date from Microsoft, so renewal alerts, the calendar and reports pick them up without anyone typing a date — Microsoft doesn't report prices, so cost and billing term stay yours to fill in. People also bring in whether their account is enabled and, on tenants with Entra ID P1, when they last signed in. Fields the sync owns are locked for editing while the connection is live. TLS certificates and compliance certifications have no Microsoft 365 equivalent, so you add them yourself (a TLS certificate can be filled in from its file or from the website serving it). The sync runs automatically overnight, and you can trigger one yourself with "Sync now" on Settings → Integrations — manual syncs are throttled to protect the shared Microsoft Graph quota.