SCIM - Entra ID Setup

1
Open the Enterprise Application
2
Navigate to Provisioning
3
Click New configuration
4
In the IdP settings page in Lemontaps, start the SCIM setup
5
Click Next
6
Click Copy the SCIM base URL
7
Paste the SCIM Base URL into the Tenant URL field in Entra ID
8
Copy the API key from Lemontaps
9
Paste the API Key into the Secret token field in Entra ID
10
Test the connection
11
Verify the test
12
Click Create
13
In Lemontaps, finish the setup wizard
14
Save the SCIM configuration
15
SCIM is now active
16
In Entra ID, navigate to Users and groups
17
Review Assignments, then navigate to Attribute mapping
18
Review mapping settings, then navigate to Overview
19
When you are ready, start the provisioning
20
Check the cycle status

SCIM - Entra ID Setup

Important: SCIM can be only be enabled for enterprise apps where you did not set up the app registration first. Therefore please use this guide for setting up SSO: https://app.layerpath.com/projects/cm9cq47pf0001la0d32yex0cx/tour If you have already configured an app registration, you can continue using it for SSO, but you will need to create a new enterprise app just for SCIM.

SCIM is now active on the Lemontaps side. However, it is not yet active in Entra ID, so no provisioning will be executed just yet. You can configure all provisioning settings from within Entra ID.

In the Users and groups settings page, you can assign users and groups to the application. They will be provisioned once you enable provisioning.

Here you can choose whether you want to provision users and groups. If you do not wish to provision groups, then disable this. Even if provisioning of groups is disabled, you can still assign groups to the application. Users within these groups will still be provisioned, but groups themselves won't be.

You can also customize the attribute mapping of users here. <TODO ERIK insert link here to guide with more info>

We recommend to start with a few test users only and then expand once you have verified the configuration.

You will always see a summary here of the current health, as well as the number of users and groups successfully provisioned. For analyzing errors, navigate to "Provisioning Logs".

It might take some time for the initial cycle to run.