Configure SCIM in Entra ID

Once Axiad completes the SAML configuration in your Axiad Conductor tenant, continue with these steps.

1. Sign into Entra ID as a Global administrator.

2. Select Enterprise applications from the left menu.

3. Search for and select the Axiad Conductor enterprise application that was created in the Configure SAML in Entra ID procedure.

Note

Axiad uses the same application for SAML and SCIM.

4. Click Users and groups.

5. Confirm the appropriate users and/or groups are listed that you want to provision to Axiad Conductor. If these groups are not yet set up, then see Configure SAML in Entra ID for procedures.

6. Select Provisioning.

7. Click Get started.

8. From the Provisioning Mode dropdown, select Automatic.

9. In the Tenant URL field, enter the following URL:

   https://ucms-<tenantName>.<platform>.axiadids.net/secuera/api/v3/scim/<tenantName>

10. In the Secret Token field, enter the token Axiad provided you.

11. Click Test Connection to confirm that it is working. If your connection fails, then reach out to Axiad support.

12. Click Save.

13. Expand the Mappings section.

14. Click Provision Entra ID Directory Users.

15. Delete all attributes other than the externalID attribute and those specified in the attribute list that is provided to you by the Axiad Customer Success team.

Note

The attribute list Axiad provides includes all attributes mapped within your Axiad Conductor tenant. You must delete all unused attributes from the SCIM mapping to avoid unnecessary data synchronizations.

See Axiad Conductor SCIM Support for details on which attributes are required for Axiad Conductor.

16. Confirm the settings, then click Save, then Yes.

17. Click Axiad Conductor SCIM | Provisioning in the breadcrumb link at the top of the page.

18. The Provisioning page displays.

19. Click Edit attribute mappings.

20. Toggle Provisioning Status to On.

21. Click Save.

22. Click Axiad Conductor SCIM | Provisioning in the breadcrumb link at the top of the page.

23. The Provisioning page displays again, and SCIM provisioning is now configured to synchronize the added users and groups. This page displays the status of the provisioning and has a link to view the provisioning logs. The synchronization is triggered every 20-40 minutes, depending on the number of users and group that are being synchronized.

Note

Entra ID SCIM synchronization does note send empty/null values for user attributes. If a user attribute was previously populated with data in Axiad Conductor via SCIM, and then that attribute is set to empty/null in Entra ID, then the change will not be sent to Axiad Conductor.

Note

If Entra ID encounters an error during SCIM provisioning, then it will reschedule that item for the next cycle and will be continually retried while also gradually scaling back the frequency of retries.

If the errors persist through retries, then the job will be put into quarantine and then stopped until an Entra ID Administrator restarts the service. See Microsoft documentation for more information.