# SCIM Provisioning

{% hint style="danger" %} <mark style="color:$danger;">**Deprecated**</mark>: No support anymore. Please visit our new Documention: <https://becard.de/resources/support/enterprise/microsoft-entra-scim-bereitstellungen>
{% endhint %}

### Application Setup

{% hint style="warning" %}
Before we proceed, it is important to ensure that the "[Getting Started](/microsoft-entra-integration/first-steps/getting-started.md)" preparations are completed.
{% endhint %}

We open our Enterprise application in Microsoft Entra, then navigate to the "<mark style="color:blue;">`Provisioning`</mark>" menu:

<figure><img src="/files/kpRB74p98tWytgqZE2mw" alt=""><figcaption></figcaption></figure>

Next, we select "Provisioning" again and choose "Automatic" for the Provisioning Mode. Under "<mark style="color:blue;">`Admin Credentials`</mark>," enter the Tenant URL and the Secret Token, which can be found in Becard under "`SCIM Provisioning via Microsoft AD`" in your User Directory. Then, test the connection. If an authentication error appears, the Access Secret Token should be regenerated.

{% hint style="warning" %}
Before testing the connection, it is important to ensure that "`Enable SCIM Provisioning via Microsoft Entra ID Enterprise application`" is activated in Becard. Additionally, "`Activate Microsoft Entra`" must also be enabled under "Interface Settings."
{% endhint %}

<figure><img src="/files/cSqu21u9rd7pYAWWHIK6" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/dSkqR889ghGCRMjMruSv" alt=""><figcaption></figcaption></figure>

### Mapping Settings

Before starting the provisioning, it is important to check the mappings. Specifically, we need to adjust two parameters in the default settings. To do this, open the mapping for "`Provision Azure Active Directory Users`":

{% hint style="danger" %}
Adjustment necessary
{% endhint %}

<table><thead><tr><th>customappsso Attribute</th><th width="321">Microsoft Entra ID Attribute</th><th data-hidden></th></tr></thead><tbody><tr><td>userName</td><td><mark style="color:red;"><code>objectId</code></mark></td><td></td></tr><tr><td>externalId</td><td><mark style="color:red;"><code>userPrincipalName</code></mark></td><td></td></tr></tbody></table>

Becard uses the standard user mapping with the following values:

<figure><img src="/files/GFCwNUywRUHrkAjtmTok" alt=""><figcaption></figcaption></figure>

Attributes that should not be synchronized can be removed from the mapping.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.becard.me/microsoft-entra-integration/data-synchronization/scim-provisioning.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
