Configure SCIM Provisioning for Microsoft Entra ID
Users with the Application Administrator role in Microsoft Azure can configure Microsoft Entra ID for SCIM provisioning in .
Once you have your Base URL and API Key, configure your SCIM provisioning in Microsoft Azure:
- In Microsoft Azure, go to Identity > Applications > Enterprise Applications.
- Select +New application, and then +Create your own application.
- Enter the name for your new SCIM application.
- Select Integrate any other application you don't find in the gallery, and then click Add. The new app will be added to the list of enterprise applications in the App Management screen.
- In the App Management screen, select Provisioning.
- Click +New configuration.
- In the Tenant URL field, paste the Base URL from .
- In the Secret Token field, paste the API Key, and then click Test Connection to test the provided keys.
For more information on configuring SCIM endpoints for Microsoft, refer to Microsoft's documentation.
Attribute Mappings in Microsoft Entra ID
Attribute mappings define how user information from the customer's identity provider is mapped to SCIM attributes expected by . Each mapping specifies which user data from the customer's system should be assigned to a SCIM attribute type during provisioning.
The table below describes the SCIM attributes that need to be mapped to their corresponding Microsoft Entra ID attributes:
| SCIM Attribute | Microsoft Entra ID Attribute |
|---|---|
| userName | |
| active | Switch([IsSoftDeleted], , "False", "True", "True", "False") |
| displayName | displayName |
| emails[type eq "work"].value | |
| name.givenName | givenName |
| name.familyName | surname |
| externalId | objectId |