SCIM Configuration Guide for Microsoft Entra ID

To enable SCIM, you first need an existing application in Microsoft Entra ID. If you haven't created an application yet, please follow these instructions.

After creating the application for the Entra ID SCIM connection, you can take these steps:

1. Open your portal in Entra ID

2. In the left pane, expand the Applications menu, then click on the Enterprise Applications menu.

3. On the page that appears, select All applications, then find and click on the application for which you want to enable provisioning.
   

4. Once the application is open, go to the Provisioning menu, then click Connect your application.
   

5. When the New provisioning configuration page appears:

   1. In the Tenant URL field, enter the SCIM endpoints base URL you’ve obtained from the SAML Single Sign-On page.

   2. In the Secret Token field, enter the token that you’ve created with the Manage Users with SCIM scope to fill the Secret token field.

   3. Click the Test Connection button.
      
      
      

   4. Once you see the message “Connection test for ‘your_app_name’ was successful,” click the Create button. You will then be redirected to the Provisioning Overview (Preview) page.
      
      
      

6. Go to the Provisioning menu, then:

   1. Click Mappings.

   2. Select Provision Microsoft Entra ID Groups.

   3. Set Enabled to No.

   4. Click the Save button and confirm by selecting Yes.
      
      
      
      
      

7. Return to the Mappings section and click Provision Microsoft Entra ID Users.
   

8. In the Attribute Mappings section, delete all deletable attributes except displayName.
   
   
   
   

9. Click the Edit button for the userName record, set all fields as shown in the image below, and then click the OK button.
   

10. Click the Add New Mapping link, then add a new mapping for the active field as shown below.
    
    

11. Our final mappings will look something like the one below:
    
    
    
    

12. Click the Save button at the top of the page
    

13. Now, return to your application's provisioning menu and set the Provisioning Status to On, then click the Save button
    
    

14. Open the Overview (Preview) menu, click Start provisioning, and select Yes to finalize the configuration.

15. From now on, users who have been assigned to this application will be sent to PowerDMARC.