How to Set Up SCIM with Microsoft Entra

This guide outlines how to set up SCIM (System for Cross-domain Identity Management) provisioning using Microsoft Entra. You’ll learn how to create a new application, configure SCIM settings, map user attributes, and delete an application if required. Screenshots are included throughout to guide your setup.

Step 1: Create a New Application in Microsoft Entra

1. Log in to entra.microsoft.com.

2. In the left-hand menu, select Enterprise Applications.

   

3. Click + New application.

   

4. Click Create your own application.
5. Name the application and click Create.
6. The new application will now appear in your application list.
7. Click the application name to begin configuration.

Step 2: Configure SCIM Provisioning

8. Click Provisioning from the app navigation panel.
9. Click Connectivity.

10. Enter the SCIM URL and API key provided by JL, then click Save.

    After the API key is pasted, click on Test connection and get a success message before the Save button is available.

Step 3: Provision a User On Demand

11. Click Provision on Demand from the left menu.
12. Search for a user, then click Provision.
    Confirm that provisioning was successful.

Step 4: Add or Modify Attribute Mappings

The below steps will walk you through and example and what should be added in to the relevant fields.

1. Click Attribute Mapping, then select Provision Microsoft Entra ID Users.

2. Scroll to the bottom and tick Show advanced options, then click Edit attribute list for customappsso.

   

3. Scroll to the bottom of the attribute list and add the following:
   • urn:ietf:params:scim:schemas:extension:UserExtension:2.0:User:organisationKey
   • urn:ietf:params:scim:schemas:extension:UserExtension:2.0:User:defaultSalesChannelKey
4. Check the boxes for:
   • emails[type eq "work"].value
   • displayName
   • User:organisationKey (as listed above)
5. Click Save.
6. Click Add New Mapping.

Step 5: Set Mapping Type for Custom Attributes

7. For each added attribute, change Mapping Type to Constant, and set the value (e.g., internal or companyName).
   The value must be a valid organisation key in JL.
8. Click OK.
9. Repeat for defaultSalesChannelKey.

Step 6: Delete an Application (If Needed)

1. Go to Enterprise Applications, select the target app.
2. Click Properties
3. Click Delete.

4. Confirm by clicking Yes.

    

The application should now be removed from the list.