SCIM Setup for Microsoft Entra ID (Formerly Azure AD)

In this article:

• Generate a SCIM Token
• Entra ID Provisioning Setup
• Set Up Attribute Mapping
  • User Type

Organizations using Microsoft Entra ID (formerly known as Azure Active Directory) can set up the System for Cross-domain Identity Management (SCIM) for user management in Keycafe.

Generate a SCIM Token

1. On desktop, select Settings → Identity Provisioning.
2. Click Generate new SCIM token, and copy the token. Note that if you exit this page, the token will not be displayed again.

Entra ID Provisioning Setup

1. Log in to the Microsoft Entra portal.

2. From the Home screen, navigate to Entra ID → Manage → Enterprise Apps → New Registration.

3. Set a name for the registration, and the Supported Account Type to Single Tenant (this should be the default setting). Leave the redirect URI blank.

4. In your new app, navigate to Manage → Provisioning → Configure automatic provisioning (in the bottom right).

5. Paste your Keycafe SCIM Tenant URL in the Tenant URL field, and the Keycafe SCIM token in the Secret Token field.

6. Click Test Connection to confirm the Tenant URL and SCIM token are correct.

Set Up Attribute Mapping

1. Navigate to Provisioning → Manage → Attribute Mapping → Provision Microsoft Entra ID Users.

2. Click Add New Mapping at the bottom of the page.

User Type

1. Set an appropriate Mapping Type. In this example we will use Constant, but you can read more about Mapping Types in Microsoft's Help Centre.
2. Set the Constant Value as either FULL or SMARTBOX. This will dictate whether users provisioned from Entra ID will be Full Users or SmartBox Users.
3. Set Target attribute to userType.

4. Click OK to complete.