This Beta recipe reflects the documented provider flow but is not evidence of certification or interoperability with every provider release. Test it in a non-production tenant before rollout.
Microsoft Entra ID Integration
1. Create SCIM Token
Follow Step 1 above to generate a SCIM token.
2. Configure Azure AD Provisioning
- Log into Azure Portal
- Navigate to Azure Active Directory → Enterprise Applications
- Select your application
- Click Provisioning in the left sidebar
- Click Get started
3. Provisioning Configuration
Set the following:
| Field | Value |
|---|---|
| Provisioning Mode | Automatic |
| Tenant URL | https://auth.example.com/scim/v2 |
| Secret Token | scim_live_your_token |
4. Test Connection
Click Test Connection to validate the configuration.
Expected Result: “The supplied credentials are authorized to enable provisioning”
Troubleshooting Connection Failures:
- Verify the tenant URL ends with
/scim/v2(no trailing slash) - Ensure the secret token is the full token including the
scim_live_prefix - Check that AuthOS is accessible from Azure’s IP ranges
- Confirm the token has not expired
5. Configure Mappings
Click Mappings to configure attribute synchronization:
User Mappings
Navigate to Provision Azure Active Directory Users:
| Azure AD Attribute | AuthOS Attribute | Notes |
|---|---|---|
userPrincipalName |
userName |
Required |
mail |
emails[type eq "work"].value |
Primary email |
Switch([IsSoftDeleted], , "False", "True", "True", "False") |
active |
Handles soft delete |
displayName |
displayName |
Optional |
givenName |
name.givenName |
Optional |
surname |
name.familyName |
Optional |
Group Mappings
Navigate to Provision Azure Active Directory Groups (if using group sync):
| Azure AD Attribute | AuthOS Attribute |
|---|---|
displayName |
displayName |
members |
members |
6. Configure Scoping
Under Settings → Scope, choose:
- Sync only assigned users and groups (recommended for initial setup)
- Sync all users and groups (for full directory sync)
7. Save and Start Provisioning
- Click Save to save the configuration
- Set Provisioning Status to On
- Click Save again
Azure AD will begin an initial synchronization cycle.
8. Monitor Provisioning
- Navigate to Provisioning → Provisioning logs
- Monitor for successful user creation events
- Check for any errors or warnings
Typical Initial Cycle Duration: 20-40 minutes
Next steps
Complete the SCIM validation guide before production, or return to the provider chooser.