How to set up SCIM with Azure AD

About this article

The purpose of this article is to guide you through the setup of SCIM with Azure AD. If you're looking for more general information about SCIM and what it is, please go to our other article:  What is SCIM and how does Templafy use it?

Prerequisites

Templafy/Implementation partner

Steps explained below are needed actions from Templafy/Implementation partners:

1. Go to yourtenant.templafy.com in a browser and click Administration
2. Navigate to Authentication Method in admin interface and create a new method.
3. Save the new authentication method and now you will see a field called SCIM API Key. Generate a new one and then copy it.
4. Send SCIM key to client IT

Client IT 

Step-by-step guide

1. Go to your Azure Portal and sign in (Important: make sure you are in the correct directory!)
2. Navigate to Azure Active Directory on the left hand side
   
   
   
   
3. Navigate to Enterprise Applications > All applications > New application
   
   

   SCIM isn't supported from the same Enterprise Application. So if you are already using AzureAD (OpenID) as authentication for Templafy, you would need to create/ add a new Enterprise Application designated for SCIM.

   
   
   
   
4. Search for Templafy in the Gallery and click add to choose the highlighted (Templafy SAML2) application
   
   
   
   
5. Select the Provisioning tab 
   
   
   
   
6. Set the Provisioning Mode to Automatic.
   
   
   
   
7. Under the Admin Credentials section, input https://scim.templafy.com/scim in Tenant URL. Input the SCIM API Key value retrieved earlier in Secret Token. Click Test Connection to ensure Azure AD can connect to Templafy. If the connection fails, ensure your Templafy account has Admin permissions and try again.
   
   
   
   
8. In the Notification Email field, enter the email address of a person or group who should receive the provisioning error notifications and check the checkbox - Send an email notification when a failure occurs.
   
   
   
   
9. Click Save
10. Under the Mappings section, select Synchronize Azure Active Directory Groups to Templafy.
    
    
    
    
11. Review the group attributes that are synchronized from Azure AD to Templafy in the Attribute Mapping section. The attributes selected as Matching properties are used to match the groups in Templafy for update operations. Select the Save button to commit any changes.
    
    
    
    
12. To configure scoping filters, refer to the following instructions provided here
13. To enable the Azure AD provisioning service for Templafy, change the Provisioning Status to On in the Settings section. 
    
    
    
    
14. Define the users and/or groups that you would like to provision to Templafy by choosing the desired values in Scope in the Settings section.
    
    
    
    
15. When you are ready to provision, click Save.
16. If you decide to Sync only assigned users and groups. Please navigate back to Users and Groups section of the App to add relevant users and/ or groups
    
    

Note

Related articles