SCIM Provisioning Configuration for Microsoft Entra ID
Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)
This guide walks you through configuring SCIM provisioning for Brellium using Microsoft Entra ID (formerly Azure Active Directory). SCIM provisioning lets you create, update, and deactivate Brellium users from Microsoft Entra ID.
The screenshots come from a Brellium test tenant. Your application names, organization name, and IDs will be different.
IT administrators can open the SSO and SCIM setup portal on their own. In Brellium, go to Control Center > Settings. The Single sign-on and Directory sync (SCIM) sections each have an Edit configuration button. Each button opens the setup portal for that connection in a new tab, so you can configure and change settings without a support ticket.
Brellium Control Center > Settings — the Single sign-on and Directory sync (SCIM) sections
Before you can use the setup portal, make sure that:
SSO and SCIM are turned on for your organization. If you do not see the Single sign-on and Directory sync (SCIM) sections on the settings page, contact your customer success manager to turn on the feature for your organization. You can open the SSO and SCIM configuration only after the feature is on.
You have the can edit sso settings permission. Your Brellium account must have the can edit sso settings permission under Settings. The can edit org settings permission does not give access to SSO and SCIM. If you do not have the permission, ask a Brellium administrator in your organization to give it to you.
The can edit sso settings permission under Settings
Users assigned to the Brellium SCIM app in Entra ID are created in Brellium
Push profile updates
Entra ID to Brellium
Profile changes made in Entra ID are synced to Brellium
Push user deactivation
Entra ID to Brellium
Users unassigned or disabled in Entra ID are deactivated in Brellium
Reactivate users
Entra ID to Brellium
Previously deactivated users are reactivated when reassigned in Entra ID
Push groups
Entra ID to Brellium
Groups assigned to the Brellium SCIM app, and their memberships, are synced to Brellium
SCIM only pushes groups that are directly assigned to the Brellium SCIM enterprise application. If Brellium also needs groups that are not assigned to the app (for example, location or department groups), you must grant Brellium read access to group memberships in Microsoft Graph. See Microsoft Graph Permissions for Group Sync.
User type — determines the default permissions assigned when the user is created in Brellium. You must set this value correctly. Accepted values: employee, operations, manager (unless otherwise configured in coordination with Brellium). If you need a custom configuration, contact your customer success manager or Brellium support.
timezone
User’s timezone
externalId
External identifier. Map it to the Entra ID objectId.
The following attributes use the urn:ietf:params:scim:schemas:extension:enterprise:2.0:User schema namespace.
Attribute
Description
employeeNumber
Employee number
department
Department
division
Division
organization
Organization
The SCIM userName attribute in Brellium follows an email address format. Ensure the userName attribute is mapped to a UPN or email field in Microsoft Entra ID that uses an email address format.
On the Browse Microsoft Entra App Gallery page, click Create your own application.
Browse Microsoft Entra App Gallery — click Create your own application
Enter a name for the application (for example, BRELLIUM SCIM).
Select Integrate any other application you don’t find in the gallery (Non-gallery).
Click Create.
Create your own application — select Non-gallery
Ignore the suggested gallery applications. Brellium is not in the Microsoft Entra App Gallery.
2
Assign users and groups
In the new SCIM application, go to Manage > Users and groups.
Click Add user/group.
Select the same users and groups that are assigned to your Brellium SSO application, then click Assign.
Users and groups — assign the same users and groups as the SSO application
Assign the same users and groups to both the SSO application and the SCIM application. Users that are assigned to only one application cannot sign in, or are not provisioned.
Only the groups you assign here are pushed to Brellium. To give Brellium other groups as well, complete the Microsoft Graph Permissions for Group Sync guide after this one.
3
Connect Microsoft Entra ID to Brellium
In the SCIM application, go to Manage > Provisioning.
On the Get started with application provisioning page, click Connect your application.
Get started with application provisioning — click Connect your application
Set Select authentication method to Bearer authentication.
In Tenant URL, paste the SCIM endpoint URL from Brellium, then add ?aadOptscim062020 to the end of it.
In Secret token, paste the token from Brellium.
Click Test connection and wait for the message Connection test for ‘BRELLIUM SCIM’ was successful.
Click Create.
Admin credentials — Tenant URL ends with ?aadOptscim062020
Add the ?aadOptscim062020 query parameter to the end of the Tenant URL. This flag opts your application into Microsoft’s SCIM compliance fixes and resolves known Microsoft Entra ID provisioning issues. Without it, provisioning can fail with attribute or PATCH request errors.
4
Map externalId to objectId
In the SCIM application, go to Manage > Attribute mapping, and stay on the Users tab.
On the row where Source Attribute is mailNickname and Target Attribute is externalId, click the edit icon.
Attribute mapping — edit the mailNickname → externalId row
Change Source attribute (Microsoft Entra ID) to objectId.
The objectId never changes, so Brellium can match a user even if their name or email changes. A mailNickname can change.
5
Match users by email
Back on the Attribute mapping page, click the edit icon on the row where Source Attribute is mail and Target Attribute is emails[type eq "work"].value.
Attribute mapping — edit the mail → emails row
Select Yes for Match objects using this attribute.
Set Matching precedence to 2.
Click Apply.
Edit Attribute Mapping — match objects using mail, matching precedence 2
Entra ID first matches users by userPrincipalName (precedence 1). If no user matches, it tries the work email (precedence 2). This prevents duplicate users in Brellium when a user already exists with the same email.
6
Remove the manager mapping and save
On the Attribute mapping page, click the delete icon on the manager row.
Attribute mapping — delete the manager row
Check that the list now shows:
userPrincipalName → userName with matching precedence 1
mail → emails[type eq "work"].value with matching precedence 2
objectId → externalId
No manager row
Click Save, and confirm if Entra ID asks you to.
Attribute mapping — final user mappings
7
Turn on group provisioning (optional)
Go to Manage > Provisioning and expand Mappings.
Check the Enabled column for Provision Microsoft Entra ID Groups:
To push assigned groups to Brellium, make sure it is Yes.
To push only users, select Provision Microsoft Entra ID Groups, set Enabled to No, and save.
Mappings — Provision Microsoft Entra ID Groups and Users
8
Start provisioning
On the same Provisioning page, expand Settings and set Scope to Sync only assigned users and groups.
Set Provisioning Status to On.
Click Save.
Provisioning — set Provisioning Status to On and save
Go to Overview. If Current cycle status shows Initial sync paused, click Start provisioning.
Provisioning overview — click Start provisioning
Microsoft Entra ID begins the initial provisioning cycle. The initial cycle can take longer than later cycles, which run every 40 minutes.
To test before the first cycle, use Provision on demand to provision one or two users and check the result.
9
Verify provisioning
In the SCIM application, go to Monitor > Provisioning logs and check the status of provisioned users.
In the Brellium user directory, verify that the users were created with the correct profile attributes.
Change a test user’s profile in Microsoft Entra ID (for example, the job title) and verify that the change appears in Brellium after the next cycle.
Unassign a test user from the SCIM application and verify that the user is deactivated in Brellium.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Brellium","colors":{"primary":"#E69256","light":"#FBBE84","dark":"#CC6C29"},"logo":{"light":"https://mintcdn.com/brellium/MtEPN0p9K6U1Ocgn/logo/light.svg?fit=max\u0026auto=format\u0026n=MtEPN0p9K6U1Ocgn\u0026q=85\u0026s=90b1f9eb311283ac3edd61649ff88e21","dark":"https://mintcdn.com/brellium/MtEPN0p9K6U1Ocgn/logo/dark.svg?fit=max\u0026auto=format\u0026n=MtEPN0p9K6U1Ocgn\u0026q=85\u0026s=12051e0a4ec697249f55c5bf2811530f"},"favicon":"https://mintcdn.com/brellium/MtEPN0p9K6U1Ocgn/favicon.ico?fit=max\u0026auto=format\u0026n=MtEPN0p9K6U1Ocgn\u0026q=85\u0026s=add9ec17e9d30834113645ecd11ae117","navbar":{"links":[{"href":"mailto:sso.support@brellium.com","label":"Support"}],"primary":{"type":"button","label":"Sign In","href":"https://app.brellium.com"}},"footer":{"socials":{"github":"https://github.com/brellium-ai"}},"contextual":{"options":["copy","view","chatgpt","claude","perplexity","mcp","cursor","vscode"],"display":"header"},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"brellium","hasAudioNarration":false,"actualSubdomain":"brellium","customDomains":["sso.brellium.dev"],"gitSource":{"type":"github","owner":"brellium-ai","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"entitlements":{},"buildId":"6ad0e548670ce012d563d8bc","clientVersion":"0.0.4094","searchFilterCounts":[{"language":"default","tag":"Azure AD / Microsoft Entra ID","count":3},{"language":"default","tag":"Okta Integration Network","count":2},{"language":"default","tag":"Overview","count":1}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"integrations/azure-ad-scim","slug":"/integrations/azure-ad-scim","pageMetadata":{"title":"SCIM Provisioning Configuration for Microsoft Entra ID","description":"Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)","href":"/integrations/azure-ad-scim"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,li:`li`,ol:`ol`,p:`p`,strong:`strong`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,ul:`ul`,..._provideComponents(),...props.components},{Frame,Heading,Note,OptimizedImage,Step,Steps,Table,Tip,Warning}=_components;if(!Frame)_missingMdxReference(`Frame`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!Note)_missingMdxReference(`Note`,true);if(!OptimizedImage)_missingMdxReference(`OptimizedImage`,true);if(!Step)_missingMdxReference(`Step`,true);if(!Steps)_missingMdxReference(`Steps`,true);if(!Table)_missingMdxReference(`Table`,true);if(!Tip)_missingMdxReference(`Tip`,true);if(!Warning)_missingMdxReference(`Warning`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`This guide walks you through configuring SCIM provisioning for Brellium using Microsoft Entra ID (formerly Azure Active Directory). SCIM provisioning lets you create, update, and deactivate Brellium users from Microsoft Entra ID.`}),`\n`,_jsx(Note,{children:_jsx(_components.p,{children:`The screenshots come from a Brellium test tenant. Your application names, organization name, and IDs will be different.`})}),`\n`,_jsx(Heading,{level:`2`,id:`prerequisites`,children:`Prerequisites`}),`\n`,_jsx(_components.p,{children:`Before you configure SCIM provisioning, ensure you have:`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsx(_components.li,{children:`Administrator access to your Microsoft Entra ID tenant (Application Administrator or higher)`}),`\n`,_jsxs(_components.li,{children:[`A Brellium account with the `,_jsx(_components.strong,{children:`can edit sso settings`}),` permission, with SSO and SCIM turned on for your organization (see `,_jsx(_components.a,{href:`#access-the-brellium-setup-portal`,children:`Access the Brellium setup portal`}),`)`]}),`\n`,_jsxs(_components.li,{children:[`SSO configured for Brellium (see the `,_jsx(_components.a,{href:`/integrations/azure-ad-sso`,children:`SSO Configuration for Microsoft Entra ID guide`}),`)`]}),`\n`,_jsxs(_components.li,{children:[`The SCIM endpoint URL and secret token from Brellium (see `,_jsx(_components.a,{href:`#get-the-scim-endpoint-url-and-token`,children:`Get the SCIM endpoint URL and token`}),`)`]}),`\n`]}),`\n`,_jsx(Heading,{level:`2`,id:`access-the-brellium-setup-portal`,children:`Access the Brellium setup portal`}),`\n`,_jsxs(_components.p,{children:[`IT administrators can open the SSO and SCIM setup portal on their own. In Brellium, go to `,_jsx(_components.a,{href:`https://app.brellium.com/settings`,children:`Control Center > Settings`}),`. The `,_jsx(_components.strong,{children:`Single sign-on`}),` and `,_jsx(_components.strong,{children:`Directory sync (SCIM)`}),` sections each have an `,_jsx(_components.strong,{children:`Edit configuration`}),` button. Each button opens the setup portal for that connection in a new tab, so you can configure and change settings without a support ticket.`]}),`\n`,_jsx(Frame,{caption:`Brellium Control Center > Settings — the Single sign-on and Directory sync (SCIM) sections`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/brellium-settings/settings-page.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=e1c848dc76ea414af11b6960e0ed44cf`,alt:`Brellium Team Settings page showing the Single sign-on connection with its Client ID, the Directory sync (SCIM) section, and an Edit configuration button for each`,\"data-og-width\":`2784`,width:`2784`,\"data-og-height\":`2226`,height:`2226`,\"data-path\":`images/brellium-settings/settings-page.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/brellium-settings/settings-page.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=42e0dd6b657801dc87550368ba147fcc 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/brellium-settings/settings-page.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=03e088062429fab9d10a7516a14538e8 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/brellium-settings/settings-page.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=bdcb9d3bf73b3cd547d55adc5e049a33 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/brellium-settings/settings-page.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=a30d4b930aa617a51b8253208f767251 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/brellium-settings/settings-page.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=400976f1d26aebdbf809f9d87527b881 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/brellium-settings/settings-page.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=3f31fd96ed782d97670b7c6d3453a504 2500w`})}),`\n`,_jsx(_components.p,{children:`Before you can use the setup portal, make sure that:`}),`\n`,_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`SSO and SCIM are turned on for your organization.`}),` If you do not see the `,_jsx(_components.strong,{children:`Single sign-on`}),` and `,_jsx(_components.strong,{children:`Directory sync (SCIM)`}),` sections on the settings page, contact your customer success manager to turn on the feature for your organization. You can open the SSO and SCIM configuration only after the feature is on.`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`You have the can edit sso settings permission.`}),` Your Brellium account must have the `,_jsx(_components.strong,{children:`can edit sso settings`}),` permission under `,_jsx(_components.strong,{children:`Settings`}),`. The `,_jsx(_components.strong,{children:`can edit org settings`}),` permission does not give access to SSO and SCIM. If you do not have the permission, ask a Brellium administrator in your organization to give it to you.`]}),`\n`]}),`\n`,_jsx(Frame,{caption:`The can edit sso settings permission under Settings`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/kYvgw5NiiN6gzt1c/images/brellium-settings/can-edit-sso-settings.png?fit=max\u0026auto=format\u0026n=kYvgw5NiiN6gzt1c\u0026q=85\u0026s=d45e463a48591d308268ca64bb9eff00`,alt:`Brellium Settings permissions: can view page, can edit org settings, and can edit sso settings`,\"data-og-width\":`1520`,width:`1520`,\"data-og-height\":`188`,height:`188`,\"data-path\":`images/brellium-settings/can-edit-sso-settings.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/kYvgw5NiiN6gzt1c/images/brellium-settings/can-edit-sso-settings.png?w=280\u0026fit=max\u0026auto=format\u0026n=kYvgw5NiiN6gzt1c\u0026q=85\u0026s=3033af6fcab76738a463fbf4db75381d 280w, https://mintcdn.com/brellium/kYvgw5NiiN6gzt1c/images/brellium-settings/can-edit-sso-settings.png?w=560\u0026fit=max\u0026auto=format\u0026n=kYvgw5NiiN6gzt1c\u0026q=85\u0026s=f59631893ef6c71093b84b31f504ab7d 560w, https://mintcdn.com/brellium/kYvgw5NiiN6gzt1c/images/brellium-settings/can-edit-sso-settings.png?w=840\u0026fit=max\u0026auto=format\u0026n=kYvgw5NiiN6gzt1c\u0026q=85\u0026s=cc16065fe7ff7b1c2e9ff0b08313a1a0 840w, https://mintcdn.com/brellium/kYvgw5NiiN6gzt1c/images/brellium-settings/can-edit-sso-settings.png?w=1100\u0026fit=max\u0026auto=format\u0026n=kYvgw5NiiN6gzt1c\u0026q=85\u0026s=12a2e795083388fc5b3953e5a6b44ff4 1100w, https://mintcdn.com/brellium/kYvgw5NiiN6gzt1c/images/brellium-settings/can-edit-sso-settings.png?w=1650\u0026fit=max\u0026auto=format\u0026n=kYvgw5NiiN6gzt1c\u0026q=85\u0026s=889d4f4440cd6a4b1472c6d0f3edf385 1650w, https://mintcdn.com/brellium/kYvgw5NiiN6gzt1c/images/brellium-settings/can-edit-sso-settings.png?w=2500\u0026fit=max\u0026auto=format\u0026n=kYvgw5NiiN6gzt1c\u0026q=85\u0026s=4e96692f4f0c87341b2fd98fc4955f9a 2500w`})}),`\n`,_jsx(Heading,{level:`2`,id:`supported-features`,children:`Supported features`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Feature`}),_jsx(_components.th,{children:`Direction`}),_jsx(_components.th,{children:`Description`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Push new users`}),_jsx(_components.td,{children:`Entra ID to Brellium`}),_jsx(_components.td,{children:`Users assigned to the Brellium SCIM app in Entra ID are created in Brellium`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Push profile updates`}),_jsx(_components.td,{children:`Entra ID to Brellium`}),_jsx(_components.td,{children:`Profile changes made in Entra ID are synced to Brellium`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Push user deactivation`}),_jsx(_components.td,{children:`Entra ID to Brellium`}),_jsx(_components.td,{children:`Users unassigned or disabled in Entra ID are deactivated in Brellium`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Reactivate users`}),_jsx(_components.td,{children:`Entra ID to Brellium`}),_jsx(_components.td,{children:`Previously deactivated users are reactivated when reassigned in Entra ID`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Push groups`}),_jsx(_components.td,{children:`Entra ID to Brellium`}),_jsx(_components.td,{children:`Groups assigned to the Brellium SCIM app, and their memberships, are synced to Brellium`})]})]})]}),`\n`,_jsx(Warning,{children:_jsxs(_components.p,{children:[`SCIM only pushes groups that are `,_jsx(_components.strong,{children:`directly assigned`}),` to the Brellium SCIM enterprise application. If Brellium also needs groups that are not assigned to the app (for example, location or department groups), you must grant Brellium read access to group memberships in Microsoft Graph. See `,_jsx(_components.a,{href:`/integrations/azure-ad-graph-permissions`,children:`Microsoft Graph Permissions for Group Sync`}),`.`]})}),`\n`,_jsx(Heading,{level:`2`,id:`supported-profile-attributes`,children:`Supported profile attributes`}),`\n`,_jsx(Heading,{level:`3`,id:`core-attributes`,children:`Core attributes`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`SCIM attribute`}),_jsx(_components.th,{children:`Description`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`userName`})}),_jsx(_components.td,{children:`User’s primary identifier (email address format)`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`emails[type eq \"work\"].value`})}),_jsx(_components.td,{children:`Work email address`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`name.givenName`})}),_jsx(_components.td,{children:`First name`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`name.familyName`})}),_jsx(_components.td,{children:`Last name`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`active`})}),_jsx(_components.td,{children:`Account activation status`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`title`})}),_jsx(_components.td,{children:`Job title`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`userType`})}),_jsxs(_components.td,{children:[`User type — determines the default permissions assigned when the user is created in Brellium. `,_jsx(_components.strong,{children:`You must set this value correctly.`}),` Accepted values: `,_jsx(_components.code,{children:`employee`}),`, `,_jsx(_components.code,{children:`operations`}),`, `,_jsx(_components.code,{children:`manager`}),` (unless otherwise configured in coordination with Brellium). If you need a custom configuration, contact your customer success manager or `,_jsx(_components.a,{href:`mailto:sso.support@brellium.com`,children:`Brellium support`}),`.`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`timezone`})}),_jsx(_components.td,{children:`User’s timezone`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`externalId`})}),_jsxs(_components.td,{children:[`External identifier. Map it to the Entra ID `,_jsx(_components.code,{children:`objectId`}),`.`]})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`enterprise-user-extension-attributes`,children:`Enterprise User extension attributes`}),`\n`,_jsxs(_components.p,{children:[`The following attributes use the `,_jsx(_components.code,{children:`urn:ietf:params:scim:schemas:extension:enterprise:2.0:User`}),` schema namespace.`]}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Attribute`}),_jsx(_components.th,{children:`Description`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`employeeNumber`})}),_jsx(_components.td,{children:`Employee number`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`department`})}),_jsx(_components.td,{children:`Department`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`division`})}),_jsx(_components.td,{children:`Division`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.code,{children:`organization`})}),_jsx(_components.td,{children:`Organization`})]})]})]}),`\n`,_jsx(Warning,{children:_jsxs(_components.p,{children:[`The SCIM `,_jsx(_components.code,{children:`userName`}),` attribute in Brellium follows an email address format. Ensure the `,_jsx(_components.code,{children:`userName`}),` attribute is mapped to a UPN or email field in Microsoft Entra ID that uses an email address format.`]})}),`\n`,_jsx(Heading,{level:`2`,id:`get-the-scim-endpoint-url-and-token`,children:`Get the SCIM endpoint URL and token`}),`\n`,_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`In Brellium, go to `,_jsx(_components.a,{href:`https://app.brellium.com/settings`,children:`Control Center > Settings`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Under `,_jsx(_components.strong,{children:`Directory sync (SCIM)`}),`, click `,_jsx(_components.strong,{children:`Edit configuration`}),`. The setup portal opens in a new tab.`]}),`\n`,_jsxs(_components.li,{children:[`Copy the `,_jsx(_components.strong,{children:`SCIM endpoint URL`}),` and the `,_jsx(_components.strong,{children:`token`}),`. You use them in the `,_jsx(_components.a,{href:`#configuration-steps`,children:`Connect Microsoft Entra ID to Brellium`}),` step.`]}),`\n`]}),`\n`,_jsxs(_components.p,{children:[`If you cannot open the setup portal, see `,_jsx(_components.a,{href:`#access-the-brellium-setup-portal`,children:`Access the Brellium setup portal`}),`.`]}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:`Treat the secret token like a password. Do not send it by email or chat.`})}),`\n`,_jsx(Heading,{level:`2`,id:`configuration-steps`,children:`Configuration steps`}),`\n`,_jsxs(Steps,{children:[_jsxs(Step,{title:`Create a non-gallery enterprise application`,children:[_jsx(_components.p,{children:`SCIM provisioning uses a separate enterprise application from the one you use for SSO.`}),_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`In the `,_jsx(_components.a,{href:`https://entra.microsoft.com`,children:`Microsoft Entra admin center`}),`, go to `,_jsx(_components.strong,{children:`Entra ID`}),` > `,_jsx(_components.strong,{children:`Enterprise apps`}),` > `,_jsx(_components.strong,{children:`All applications`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`New application`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Enterprise applications — click New application`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/01-enterprise-applications.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=423bdb284ba6efa378ae28cbd7c79c6c`,alt:`Enterprise applications list showing the BRELLIUM SSO app and the New application button`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/01-enterprise-applications.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/01-enterprise-applications.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=aa3766024f6435b470b28679a88c5a78 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/01-enterprise-applications.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=9a42c943f6140016021ddc9ad46a909d 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/01-enterprise-applications.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=490b4ef42be81b19fc4bc7efa803a160 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/01-enterprise-applications.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=3c39bf0c1daf284a90f9260b31b75b57 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/01-enterprise-applications.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=f25f5003394bbe4456c7344716b69dbb 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/01-enterprise-applications.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=c06bf5ccf17bf199ecaf306de25f2d24 2500w`})}),_jsxs(_components.ol,{start:`3`,children:[`\n`,_jsxs(_components.li,{children:[`On the `,_jsx(_components.strong,{children:`Browse Microsoft Entra App Gallery`}),` page, click `,_jsx(_components.strong,{children:`Create your own application`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Browse Microsoft Entra App Gallery — click Create your own application`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/02-app-gallery.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=73d8543c015fbde7079d1297c9754a1d`,alt:`Browse Microsoft Entra App Gallery page with the Create your own application button`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/02-app-gallery.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/02-app-gallery.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=74a82a2c0fda45cc8369d8f845c6e63b 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/02-app-gallery.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=774b1026a9209ddddc667bb01bf694c1 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/02-app-gallery.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=116446d50956dac6ff883b6de5eda734 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/02-app-gallery.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=5d44585f93f9db33d3d7e622f837a34c 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/02-app-gallery.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=7a2804ea72e9404bbf5c7c094c127009 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/02-app-gallery.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=fa9602df92193a327e090c9c55d39598 2500w`})}),_jsxs(_components.ol,{start:`4`,children:[`\n`,_jsxs(_components.li,{children:[`Enter a name for the application (for example, `,_jsx(_components.code,{children:`BRELLIUM SCIM`}),`).`]}),`\n`,_jsxs(_components.li,{children:[`Select `,_jsx(_components.strong,{children:`Integrate any other application you don’t find in the gallery (Non-gallery)`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`Create`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Create your own application — select Non-gallery`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/03-create-your-own-application.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=63e944c43b14db36148774e89f6b5bff`,alt:`Create your own application panel with the name BRELLIUM SCIM and the Non-gallery option selected`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/03-create-your-own-application.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/03-create-your-own-application.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=f6b4764b6eb0e5597837c1622dae2cf8 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/03-create-your-own-application.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=0e96e32edadfe6a16020843800639665 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/03-create-your-own-application.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=7180f6b330592c5d00d6623ad139afba 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/03-create-your-own-application.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=78560ddf9aa1cc63b8db5e3e3d1699db 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/03-create-your-own-application.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=3da8b7170df2a87e06aa11cda3f81da8 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/03-create-your-own-application.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=700b4812f4cca2b31f11c516492e3423 2500w`})}),_jsx(Note,{children:_jsx(_components.p,{children:`Ignore the suggested gallery applications. Brellium is not in the Microsoft Entra App Gallery.`})})]}),_jsxs(Step,{title:`Assign users and groups`,children:[_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`In the new SCIM application, go to `,_jsx(_components.strong,{children:`Manage`}),` > `,_jsx(_components.strong,{children:`Users and groups`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`Add user/group`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Select the same users and groups that are assigned to your Brellium SSO application, then click `,_jsx(_components.strong,{children:`Assign`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Users and groups — assign the same users and groups as the SSO application`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/04-users-and-groups.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=ab9bdb7b2291b329ca92202a15368582`,alt:`BRELLIUM SCIM Users and groups page with a group assigned`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/04-users-and-groups.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/04-users-and-groups.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=8c4576c67ac160d722b4d2ecc389a446 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/04-users-and-groups.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=ad04bff37c35698e44ef7ee8f5191e61 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/04-users-and-groups.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=ec128dbe2828d2cecf558d2ffb794c15 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/04-users-and-groups.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=b6dad9c3bec500421fa83dd8dce15bef 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/04-users-and-groups.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=1b27df65bfe7c308b7cfe098bc8aaa85 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/04-users-and-groups.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=93ed6bf2f077efead33c0d3234df895d 2500w`})}),_jsx(Warning,{children:_jsx(_components.p,{children:`Assign the same users and groups to both the SSO application and the SCIM application. Users that are assigned to only one application cannot sign in, or are not provisioned.`})}),_jsx(Note,{children:_jsxs(_components.p,{children:[`Only the groups you assign here are pushed to Brellium. To give Brellium other groups as well, complete the `,_jsx(_components.a,{href:`/integrations/azure-ad-graph-permissions`,children:`Microsoft Graph Permissions for Group Sync`}),` guide after this one.`]})})]}),_jsxs(Step,{title:`Connect Microsoft Entra ID to Brellium`,children:[_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`In the SCIM application, go to `,_jsx(_components.strong,{children:`Manage`}),` > `,_jsx(_components.strong,{children:`Provisioning`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`On the `,_jsx(_components.strong,{children:`Get started with application provisioning`}),` page, click `,_jsx(_components.strong,{children:`Connect your application`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Get started with application provisioning — click Connect your application`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/05-get-started-provisioning.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=243d7264d8eb035ffce41a04cd64ac0a`,alt:`BRELLIUM SCIM provisioning Get started page with the Connect your application button`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/05-get-started-provisioning.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/05-get-started-provisioning.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=dbef8690be8d7760039d432be7eb998a 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/05-get-started-provisioning.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=ca004241e0764d563f055067b623510f 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/05-get-started-provisioning.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=9355696f367d102668a76f7650c93d31 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/05-get-started-provisioning.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=ecc0e31e21180e8b3ac42b5153ef11da 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/05-get-started-provisioning.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=1814f525d81bf459fcd2f876b38b56ce 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/05-get-started-provisioning.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=00fef7e1d04dd21b5f59ba2f1af220ed 2500w`})}),_jsxs(_components.ol,{start:`3`,children:[`\n`,_jsxs(_components.li,{children:[`Set `,_jsx(_components.strong,{children:`Select authentication method`}),` to `,_jsx(_components.strong,{children:`Bearer authentication`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`In `,_jsx(_components.strong,{children:`Tenant URL`}),`, paste the SCIM endpoint URL from Brellium, then add `,_jsx(_components.code,{children:`?aadOptscim062020`}),` to the end of it.`]}),`\n`,_jsxs(_components.li,{children:[`In `,_jsx(_components.strong,{children:`Secret token`}),`, paste the token from Brellium.`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`Test connection`}),` and wait for the message `,_jsx(_components.strong,{children:`Connection test for ‘BRELLIUM SCIM’ was successful`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`Create`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Admin credentials — Tenant URL ends with ?aadOptscim062020`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/06-admin-credentials.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=bf747b886d6a037d13e0e665b920de4d`,alt:`New provisioning configuration page with Bearer authentication, the Tenant URL ending in ?aadOptscim062020, the secret token, and a successful connection test`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/06-admin-credentials.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/06-admin-credentials.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=2d50dce257c1a6b0a08af24d1c84c476 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/06-admin-credentials.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=8ef4c02ee42f19682df8da0f65ffb77d 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/06-admin-credentials.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=34dc868d683159c9791f4358520f3da0 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/06-admin-credentials.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=2d09697b1571bce9aeaba25175d46eba 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/06-admin-credentials.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=3dbe57480986547759bdf2ea63972df8 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/06-admin-credentials.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=204d4a4f31de8b218674f8a22e3644ff 2500w`})}),_jsx(Warning,{children:_jsxs(_components.p,{children:[`Add the `,_jsx(_components.code,{children:`?aadOptscim062020`}),` query parameter to the end of the Tenant URL. This flag opts your application into Microsoft’s SCIM compliance fixes and resolves `,_jsx(_components.a,{href:`https://learn.microsoft.com/en-us/entra/identity/app-provisioning/application-provisioning-config-problem-scim-compatibility`,children:`known Microsoft Entra ID provisioning issues`}),`. Without it, provisioning can fail with attribute or PATCH request errors.`]})})]}),_jsxs(Step,{title:`Map externalId to objectId`,children:[_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`In the SCIM application, go to `,_jsx(_components.strong,{children:`Manage`}),` > `,_jsx(_components.strong,{children:`Attribute mapping`}),`, and stay on the `,_jsx(_components.strong,{children:`Users`}),` tab.`]}),`\n`,_jsxs(_components.li,{children:[`On the row where `,_jsx(_components.strong,{children:`Source Attribute`}),` is `,_jsx(_components.code,{children:`mailNickname`}),` and `,_jsx(_components.strong,{children:`Target Attribute`}),` is `,_jsx(_components.code,{children:`externalId`}),`, click the edit icon.`]}),`\n`]}),_jsx(Frame,{caption:`Attribute mapping — edit the mailNickname → externalId row`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/07-attribute-mapping-default.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=0f88241494e28cfc4571d6b2fcaba2ec`,alt:`BRELLIUM SCIM Attribute mapping Users tab with the mailNickname to externalId row highlighted`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/07-attribute-mapping-default.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/07-attribute-mapping-default.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=a70ca2ef351a5ff4a3ae08cd20c9218d 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/07-attribute-mapping-default.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=c7a42bbdf29127dc15653ced0c74c728 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/07-attribute-mapping-default.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=aacfa85e861bf9d76320c8764e0dceb4 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/07-attribute-mapping-default.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=56fafcc6bae9ecef45d6b69e9d60f889 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/07-attribute-mapping-default.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=95a1c68b3f0ddd4fa1e9fa43d58c3fab 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/07-attribute-mapping-default.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=a837696e231aa80a125a7c7397a91c0a 2500w`})}),_jsxs(_components.ol,{start:`3`,children:[`\n`,_jsxs(_components.li,{children:[`Change `,_jsx(_components.strong,{children:`Source attribute (Microsoft Entra ID)`}),` to `,_jsx(_components.code,{children:`objectId`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`Apply`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Edit Attribute Mapping — source attribute objectId, target attribute externalId`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/08-edit-externalid.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=677a60cdc9bf6119de25cb5410fb8af4`,alt:`Edit Attribute Mapping page with Source attribute objectId and Target attribute externalId`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/08-edit-externalid.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/08-edit-externalid.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=7a8555c3465f9b499377288715b232bb 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/08-edit-externalid.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=f36a7c35bf066198245e4345cdaf622c 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/08-edit-externalid.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=8f39674d9f91ff8061fb6269f0c4d31d 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/08-edit-externalid.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=275d2e8463b216a5f23d3082e6ca996f 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/08-edit-externalid.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=e7a80427265e3e39b9c492c162770041 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/08-edit-externalid.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=c1a4c4b4f5f3ff2287cced0c6308cafa 2500w`})}),_jsx(Note,{children:_jsxs(_components.p,{children:[`The `,_jsx(_components.code,{children:`objectId`}),` never changes, so Brellium can match a user even if their name or email changes. A `,_jsx(_components.code,{children:`mailNickname`}),` can change.`]})})]}),_jsxs(Step,{title:`Match users by email`,children:[_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`Back on the `,_jsx(_components.strong,{children:`Attribute mapping`}),` page, click the edit icon on the row where `,_jsx(_components.strong,{children:`Source Attribute`}),` is `,_jsx(_components.code,{children:`mail`}),` and `,_jsx(_components.strong,{children:`Target Attribute`}),` is `,_jsx(_components.code,{children:`emails[type eq \"work\"].value`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Attribute mapping — edit the mail → emails row`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/09-attribute-mapping-objectid.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=03c1eaee4a388aca8e86c536f10bb6fc`,alt:`Attribute mapping Users tab showing objectId mapped to externalId and the mail row highlighted`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/09-attribute-mapping-objectid.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/09-attribute-mapping-objectid.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=b40ed6f9ef60432cedea36f77461019b 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/09-attribute-mapping-objectid.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=19cb96410dd7b6e1cbf794a0b4ab0e2b 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/09-attribute-mapping-objectid.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=f298df8438a523dd5fdf6e247239dfcf 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/09-attribute-mapping-objectid.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=12cc8e1487af78e7b24b9bb13234a84c 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/09-attribute-mapping-objectid.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=7c436bb5737aafa7f34941478a48112d 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/09-attribute-mapping-objectid.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=38920aa9121f8a3f26eb64dd9aa8f4ba 2500w`})}),_jsxs(_components.ol,{start:`2`,children:[`\n`,_jsxs(_components.li,{children:[`Select `,_jsx(_components.strong,{children:`Yes`}),` for `,_jsx(_components.strong,{children:`Match objects using this attribute`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Set `,_jsx(_components.strong,{children:`Matching precedence`}),` to `,_jsx(_components.code,{children:`2`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`Apply`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Edit Attribute Mapping — match objects using mail, matching precedence 2`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/10-edit-mail-matching.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=99432e740c75737286389a131b1c45c5`,alt:`Edit Attribute Mapping page for mail with Match objects using this attribute checked and Matching precedence set to 2`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/10-edit-mail-matching.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/10-edit-mail-matching.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=87fb5354be8f64291ad12d6338b38fce 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/10-edit-mail-matching.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=497f44b29ef5a75bb04d80a4e413d201 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/10-edit-mail-matching.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=6bfa38c1ce99b998ffd235139a1b4e92 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/10-edit-mail-matching.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=746ea1c17d848e864b35a7d832155417 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/10-edit-mail-matching.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=a3b5b740d5111c552047d0cf841577b8 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/10-edit-mail-matching.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=f20a27c950418bf81df2a3b3ccee1815 2500w`})}),_jsx(Note,{children:_jsxs(_components.p,{children:[`Entra ID first matches users by `,_jsx(_components.code,{children:`userPrincipalName`}),` (precedence 1). If no user matches, it tries the work email (precedence 2). This prevents duplicate users in Brellium when a user already exists with the same email.`]})})]}),_jsxs(Step,{title:`Remove the manager mapping and save`,children:[_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`On the `,_jsx(_components.strong,{children:`Attribute mapping`}),` page, click the delete icon on the `,_jsx(_components.code,{children:`manager`}),` row.`]}),`\n`]}),_jsx(Frame,{caption:`Attribute mapping — delete the manager row`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/11-delete-manager.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=fc8829075ac2bfd665d7a1c6ff4ba7be`,alt:`Attribute mapping Users tab with the manager row highlighted and the Delete mapping tooltip`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/11-delete-manager.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/11-delete-manager.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=d2bde9cb77c5695e893b1b4aa918a10b 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/11-delete-manager.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=c8bc6f9082ca575482dd94523bbafad1 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/11-delete-manager.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=4b9ed8d76de66b3dd824055207c3729b 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/11-delete-manager.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=8fc1cf8f47179c3c957018422b63883e 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/11-delete-manager.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=7805625bb730214447a73f75673cdcb4 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/11-delete-manager.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=f3f7c61b36a01b3e9f3ddc708939ebe9 2500w`})}),_jsxs(_components.ol,{start:`2`,children:[`\n`,_jsxs(_components.li,{children:[`Check that the list now shows:`,`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.code,{children:`userPrincipalName`}),` → `,_jsx(_components.code,{children:`userName`}),` with matching precedence `,_jsx(_components.code,{children:`1`})]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.code,{children:`mail`}),` → `,_jsx(_components.code,{children:`emails[type eq \"work\"].value`}),` with matching precedence `,_jsx(_components.code,{children:`2`})]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.code,{children:`objectId`}),` → `,_jsx(_components.code,{children:`externalId`})]}),`\n`,_jsxs(_components.li,{children:[`No `,_jsx(_components.code,{children:`manager`}),` row`]}),`\n`]}),`\n`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`Save`}),`, and confirm if Entra ID asks you to.`]}),`\n`]}),_jsx(Frame,{caption:`Attribute mapping — final user mappings`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/12-attribute-mapping-final.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=78888f68f1158c97f3cd83064d5142f2`,alt:`Attribute mapping Users tab with userPrincipalName and mail as matching attributes, objectId mapped to externalId, and no manager row`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/12-attribute-mapping-final.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/12-attribute-mapping-final.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=874b4a1984c8c28ec57a030d5e0c9dc9 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/12-attribute-mapping-final.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=4be9c0b546730a234ee5c5bb3af05cbf 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/12-attribute-mapping-final.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=6ac5ec8308801674e5d74de8f9aae250 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/12-attribute-mapping-final.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=8fc29f9f9ce6fe5b00fcf96036b243b8 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/12-attribute-mapping-final.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=ced70c28fe6e916dfa04121c4dabf340 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/12-attribute-mapping-final.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=a26b3373a0699df22763271c9d3e67ca 2500w`})})]}),_jsxs(Step,{title:`Turn on group provisioning (optional)`,children:[_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`Go to `,_jsx(_components.strong,{children:`Manage`}),` > `,_jsx(_components.strong,{children:`Provisioning`}),` and expand `,_jsx(_components.strong,{children:`Mappings`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Check the `,_jsx(_components.strong,{children:`Enabled`}),` column for `,_jsx(_components.strong,{children:`Provision Microsoft Entra ID Groups`}),`:`,`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[`To push assigned groups to Brellium, make sure it is `,_jsx(_components.strong,{children:`Yes`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`To push only users, select `,_jsx(_components.strong,{children:`Provision Microsoft Entra ID Groups`}),`, set `,_jsx(_components.strong,{children:`Enabled`}),` to `,_jsx(_components.strong,{children:`No`}),`, and save.`]}),`\n`]}),`\n`]}),`\n`]}),_jsx(Frame,{caption:`Mappings — Provision Microsoft Entra ID Groups and Users`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/13-mappings-groups.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=c6498e887b25399db8482432095cd70b`,alt:`BRELLIUM SCIM Provisioning page with Mappings expanded showing Provision Microsoft Entra ID Groups and Provision Microsoft Entra ID Users both enabled`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/13-mappings-groups.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/13-mappings-groups.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=a7c27b14c114d77ca605fa5a009399de 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/13-mappings-groups.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=a6f147524085ccb5d00bc8b46a1cf911 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/13-mappings-groups.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=6ac346b851e1c2fae579b1a18043b351 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/13-mappings-groups.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=1086a8ce27fc7ccf10303429f7cfcce2 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/13-mappings-groups.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=08b00516c82c8144877963f0359d13aa 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/13-mappings-groups.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=e8e6bf92b734758e8277ce2a2b7308c1 2500w`})})]}),_jsxs(Step,{title:`Start provisioning`,children:[_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`On the same `,_jsx(_components.strong,{children:`Provisioning`}),` page, expand `,_jsx(_components.strong,{children:`Settings`}),` and set `,_jsx(_components.strong,{children:`Scope`}),` to `,_jsx(_components.strong,{children:`Sync only assigned users and groups`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Set `,_jsx(_components.strong,{children:`Provisioning Status`}),` to `,_jsx(_components.strong,{children:`On`}),`.`]}),`\n`,_jsxs(_components.li,{children:[`Click `,_jsx(_components.strong,{children:`Save`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Provisioning — set Provisioning Status to On and save`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/14-provisioning-status-on.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=a5fdfb03641cb209fa411d77216cd801`,alt:`BRELLIUM SCIM Provisioning page with Provisioning Status set to On`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/14-provisioning-status-on.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/14-provisioning-status-on.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=cd2068538529dee94f66dfa46086123e 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/14-provisioning-status-on.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=68e1614263e1dadac60243b8ea13fb84 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/14-provisioning-status-on.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=c19e64a33f0fd595dbeb135756a6cde8 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/14-provisioning-status-on.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=c1ead4f67a6e2b7f2772ba3e72d8f17d 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/14-provisioning-status-on.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=00bdee61689f83825959e0fd7c8ed34d 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/14-provisioning-status-on.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=df0bee78856aa5e069f78661f56787e5 2500w`})}),_jsxs(_components.ol,{start:`4`,children:[`\n`,_jsxs(_components.li,{children:[`Go to `,_jsx(_components.strong,{children:`Overview`}),`. If `,_jsx(_components.strong,{children:`Current cycle status`}),` shows `,_jsx(_components.strong,{children:`Initial sync paused`}),`, click `,_jsx(_components.strong,{children:`Start provisioning`}),`.`]}),`\n`]}),_jsx(Frame,{caption:`Provisioning overview — click Start provisioning`,children:_jsx(OptimizedImage,{src:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/15-start-provisioning.png?fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=7c93fb6419072b14250233654db4987e`,alt:`BRELLIUM SCIM provisioning Overview with the Start provisioning button and current cycle status Initial sync paused`,\"data-og-width\":`2788`,width:`2788`,\"data-og-height\":`2218`,height:`2218`,\"data-path\":`images/azure-ad/scim/15-start-provisioning.png`,\"data-optimize\":`true`,\"data-opv\":`3`,srcset:`https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/15-start-provisioning.png?w=280\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=edc366eaf832e15c24faf84a7da16e33 280w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/15-start-provisioning.png?w=560\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=56e49ff7c622b5186345dceb6de39937 560w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/15-start-provisioning.png?w=840\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=b2de69bf5f17a7f733047a4d672ed70c 840w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/15-start-provisioning.png?w=1100\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=1d9f297527170ff6d996a2c00ebbf07b 1100w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/15-start-provisioning.png?w=1650\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=15c8406fa1213f162e934dbe61e2a93e 1650w, https://mintcdn.com/brellium/o9lDwwnSccBrrsWA/images/azure-ad/scim/15-start-provisioning.png?w=2500\u0026fit=max\u0026auto=format\u0026n=o9lDwwnSccBrrsWA\u0026q=85\u0026s=e49b41eab13a71efdb0864ed17f84a69 2500w`})}),_jsx(_components.p,{children:`Microsoft Entra ID begins the initial provisioning cycle. The initial cycle can take longer than later cycles, which run every 40 minutes.`}),_jsx(Tip,{children:_jsxs(_components.p,{children:[`To test before the first cycle, use `,_jsx(_components.strong,{children:`Provision on demand`}),` to provision one or two users and check the result.`]})})]}),_jsx(Step,{title:`Verify provisioning`,children:_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`In the SCIM application, go to `,_jsx(_components.strong,{children:`Monitor`}),` > `,_jsx(_components.strong,{children:`Provisioning logs`}),` and check the status of provisioned users.`]}),`\n`,_jsxs(_components.li,{children:[`In the `,_jsx(_components.a,{href:`https://app.brellium.com/user-directory`,children:`Brellium user directory`}),`, verify that the users were created with the correct profile attributes.`]}),`\n`,_jsx(_components.li,{children:`Change a test user’s profile in Microsoft Entra ID (for example, the job title) and verify that the change appears in Brellium after the next cycle.`}),`\n`,_jsx(_components.li,{children:`Unassign a test user from the SCIM application and verify that the user is deactivated in Brellium.`}),`\n`]})})]}),`\n`,_jsx(Heading,{level:`2`,id:`troubleshoot`,children:`Troubleshoot`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Issue`}),_jsx(_components.th,{children:`Cause`}),_jsx(_components.th,{children:`Solution`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[_jsx(_components.strong,{children:`Test connection`}),` fails`]}),_jsx(_components.td,{children:`Incorrect Tenant URL or secret token`}),_jsxs(_components.td,{children:[`Verify the SCIM endpoint URL and token from Brellium. Make sure the only addition to the URL is `,_jsx(_components.code,{children:`?aadOptscim062020`}),`.`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Provisioning fails with attribute or PATCH errors`}),_jsxs(_components.td,{children:[`Tenant URL does not end with `,_jsx(_components.code,{children:`?aadOptscim062020`})]}),_jsxs(_components.td,{children:[`Add `,_jsx(_components.code,{children:`?aadOptscim062020`}),` to the Tenant URL in `,_jsx(_components.strong,{children:`Admin Credentials`}),` and save`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Users are not provisioned`}),_jsx(_components.td,{children:`Users are not assigned, or the scope is wrong`}),_jsxs(_components.td,{children:[`Assign the users or their groups to the SCIM application and check the `,_jsx(_components.strong,{children:`Scope`}),` setting`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Duplicate users in Brellium`}),_jsxs(_components.td,{children:[_jsx(_components.code,{children:`mail`}),` is not a matching attribute`]}),_jsxs(_components.td,{children:[`Set `,_jsx(_components.strong,{children:`Match objects using this attribute`}),` to `,_jsx(_components.strong,{children:`Yes`}),` on the `,_jsx(_components.code,{children:`mail`}),` mapping, with matching precedence `,_jsx(_components.code,{children:`2`})]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Some groups do not appear in Brellium`}),_jsx(_components.td,{children:`SCIM only pushes groups that are assigned to the SCIM application`}),_jsxs(_components.td,{children:[`Assign the groups to the SCIM application, or grant `,_jsx(_components.a,{href:`/integrations/azure-ad-graph-permissions`,children:`Microsoft Graph permissions`}),` so Brellium can read the other groups`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Provisioning cycle is stuck`}),_jsx(_components.td,{children:`Microsoft Entra ID provisioning service issue`}),_jsxs(_components.td,{children:[`Check `,_jsx(_components.strong,{children:`Provisioning logs`}),` for errors, then click `,_jsx(_components.strong,{children:`Restart provisioning`}),` on the `,_jsx(_components.strong,{children:`Overview`}),` page`]})]})]})]}),`\n`,_jsx(Heading,{level:`2`,id:`support`,children:`Support`}),`\n`,_jsx(_components.p,{children:`If you have questions or encounter issues not covered in this guide, contact the Brellium support team:`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Email`}),`: `,_jsx(_components.a,{href:`mailto:sso.support@brellium.com`,children:`sso.support@brellium.com`})]}),`\n`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"SCIM Provisioning Configuration for Microsoft Entra ID","description":"Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)","href":"/integrations/azure-ad-scim"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Prerequisites","slug":"prerequisites","depth":2,"children":[]},{"title":"Access the Brellium setup portal","slug":"access-the-brellium-setup-portal","depth":2,"children":[]},{"title":"Supported features","slug":"supported-features","depth":2,"children":[]},{"title":"Supported profile attributes","slug":"supported-profile-attributes","depth":2,"children":[{"title":"Core attributes","slug":"core-attributes","depth":3,"children":[]},{"title":"Enterprise User extension attributes","slug":"enterprise-user-extension-attributes","depth":3,"children":[]}]},{"title":"Get the SCIM endpoint URL and token","slug":"get-the-scim-endpoint-url-and-token","depth":2,"children":[]},{"title":"Configuration steps","slug":"configuration-steps","depth":2,"children":[]},{"title":"Troubleshoot","slug":"troubleshoot","depth":2,"children":[]},{"title":"Support","slug":"support","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":[],"subdomain":"brellium","siteName":"Brellium","title":"SCIM Provisioning Configuration for Microsoft Entra ID - Brellium","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-15T14:38:55.969Z","originalFileLocation":"integrations/azure-ad-scim.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)\">\u003cmeta data-mint-head name=\"application-name\" content=\"Brellium\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"SCIM Provisioning Configuration for Microsoft Entra ID - Brellium\">\u003cmeta data-mint-head property=\"og:description\" content=\"Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Brellium\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://sso.brellium.dev/integrations/azure-ad-scim\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://brellium.mintlify.site/_mintlify/api/og/v2?division=Azure+AD+%2F+Microsoft+Entra+ID\u0026amp;title=SCIM+Provisioning+Configuration+for+Microsoft+Entra+ID\u0026amp;description=Configure+SCIM+user+and+group+provisioning+for+Brellium+using+Microsoft+Entra+ID+%28formerly+Azure+AD%29\u0026amp;theme=07974f6741f64c26faa5f8e1\u0026amp;signature=d293cd3371b7eaed3fb67a03ec21ff7b7dea3b4f8076f9b3ea72b016c7385a26\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"SCIM Provisioning Configuration for Microsoft Entra ID - Brellium\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://brellium.mintlify.site/_mintlify/api/og/v2?division=Azure+AD+%2F+Microsoft+Entra+ID\u0026amp;title=SCIM+Provisioning+Configuration+for+Microsoft+Entra+ID\u0026amp;description=Configure+SCIM+user+and+group+provisioning+for+Brellium+using+Microsoft+Entra+ID+%28formerly+Azure+AD%29\u0026amp;theme=07974f6741f64c26faa5f8e1\u0026amp;signature=d293cd3371b7eaed3fb67a03ec21ff7b7dea3b4f8076f9b3ea72b016c7385a26\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/brellium/HLYXKHQ7sAEsoQxL/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Brellium\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#E69256\">\u003clink data-mint-head rel=\"canonical\" href=\"https://sso.brellium.dev/integrations/azure-ad-scim\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/integrations/azure-ad-scim.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://sso.brellium.dev/#organization\",\"name\":\"Brellium\",\"url\":\"https://sso.brellium.dev\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/brellium/MtEPN0p9K6U1Ocgn/logo/light.svg?fit=max\u0026auto=format\u0026n=MtEPN0p9K6U1Ocgn\u0026q=85\u0026s=90b1f9eb311283ac3edd61649ff88e21\"}},{\"@type\":\"WebSite\",\"@id\":\"https://sso.brellium.dev#website\",\"name\":\"Brellium\",\"url\":\"https://sso.brellium.dev\",\"publisher\":{\"@id\":\"https://sso.brellium.dev/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://sso.brellium.dev/integrations/azure-ad-scim#webpage\",\"url\":\"https://sso.brellium.dev/integrations/azure-ad-scim\",\"name\":\"SCIM Provisioning Configuration for Microsoft Entra ID\",\"description\":\"Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)\",\"dateModified\":\"2026-10-15T14:38:55.969Z\",\"isPartOf\":{\"@id\":\"https://sso.brellium.dev#website\"},\"breadcrumb\":{\"@id\":\"https://sso.brellium.dev/integrations/azure-ad-scim#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://sso.brellium.dev/integrations/azure-ad-scim#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Azure AD / Microsoft Entra ID\",\"item\":\"https://sso.brellium.dev/integrations/azure-ad-sso\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SCIM Provisioning Configuration for Microsoft Entra ID\",\"item\":\"https://sso.brellium.dev/integrations/azure-ad-scim\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://sso.brellium.dev/integrations/azure-ad-scim#article\",\"headline\":\"SCIM Provisioning Configuration for Microsoft Entra ID\",\"name\":\"SCIM Provisioning Configuration for Microsoft Entra ID\",\"description\":\"Configure SCIM user and group provisioning for Brellium using Microsoft Entra ID (formerly Azure AD)\",\"url\":\"https://sso.brellium.dev/integrations/azure-ad-scim\",\"mainEntityOfPage\":{\"@id\":\"https://sso.brellium.dev/integrations/azure-ad-scim#webpage\"},\"dateModified\":\"2026-10-15T14:38:55.969Z\",\"publisher\":{\"@id\":\"https://sso.brellium.dev/#organization\"},\"isPartOf\":{\"@id\":\"https://sso.brellium.dev#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Brellium\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Brellium","nav":{"global":null,"groups":[{"group":"Overview","pages":[{"title":"Integration Guides","href":"/index"}]},{"group":"Okta Integration Network","pages":[{"title":"SSO Configuration for Okta","href":"/integrations/okta-oidc-sso"},{"title":"SCIM Provisioning Configuration for Okta","href":"/integrations/okta-scim"}]},{"group":"Azure AD / Microsoft Entra ID","pages":[{"title":"SSO Configuration for Microsoft Entra ID","description":"Configure single sign-on for Brellium using Microsoft Entra ID (formerly Azure AD)","href":"/integrations/azure-ad-sso"},{"title":"SCIM Provisioning Configuration for Microsoft Entra ID","href":"/integrations/azure-ad-scim"},{"title":"Microsoft Graph Permissions for Group Sync","description":"Grant Brellium read-only access to group memberships in Microsoft Entra ID so Brellium can sync groups that are not assigned to the SCIM application","href":"/integrations/azure-ad-graph-permissions"}]}]},"basePath":"","title":"SCIM Provisioning Configuration for Microsoft Entra ID - Brellium","buildId":"dpl_42LwxxU1kGN114H4XzwGYXa9ZDah","deploymentId":"dpl_42LwxxU1kGN114H4XzwGYXa9ZDah","dynamics":["07c022d89b","a74be98ba7","a9bb46feb3"],"chunks":["Frame-5Xwp92K7.js","DynamicMarkdown-BoyYAA8K.js","zoom-image-lightbox-DkE6VzSN.js","lightbox-handle-r17bVUz3.js","Markdown-BhTTmazV.js","clsx-CR-RHrVC.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CBUH0-zX.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BmARFYNC.js"]}
