Azure SCIM provisioning is a paid feature.

If you’re using Infisical Cloud, then it is available under the Enterprise Tier. If you’re self-hosting Infisical, then you should contact [email protected] to purchase an enterprise license to use it.

Prerequisites:

1

Create a SCIM token in Infisical

In Infisical, head to your Organization Settings > Authentication > SCIM Configuration and press the Enable SCIM provisioning toggle to allow Azure to provision/deprovision users for your organization.

SCIM enable provisioning

Next, press Manage SCIM Tokens and then Create to generate a SCIM token for Azure.

SCIM create token

Next, copy the SCIM URL and New SCIM Token to use when configuring SCIM in Azure.

SCIM copy token

2

Configure SCIM in Azure

In Azure, head to your Enterprise Application > Provisioning > Overview and press Get started.

SCIM Azure

Next, set the following fields:

  • Provisioning Mode: Select Automatic.
  • Tenant URL: Input SCIM URL from Step 1.
  • Secret Token: Input the New SCIM Token from Step 1.

Afterwards, press the Test Connection button to check that SCIM is configured properly.

SCIM Azure

After you hit Save, select Provision Microsoft Entra ID Users under the Mappings subsection.

SCIM Azure

Next, adjust the mappings so you have them configured as below:

SCIM Azure

Finally, head to your Enterprise Application > Provisioning and set the Provisioning Status to On.

SCIM Azure

Alternatively, you can go to Overview and press Start provisioning to have Azure start provisioning/deprovisioning users to Infisical.

SCIM Azure

Now Azure can provision/deprovision users to/from your organization in Infisical.

FAQ

Was this page helpful?

Okta SCIMJumpCloud SCIM