Skip to main content

SCIM Integration

How to set up the Microsoft Active Directory integration to synchronize user information

Updated over a week ago

πŸ› οΈ 1: Enable SCIM within the revel8 Platform

  1. In the revel8 platform, go to: Integrations β†’ SCIM

  2. Enable SCIM by clicking Generate SCIM Config

  3. Copy the SCIM URL and Secret Token - you'll need these in Step 3

🏒 2: Create an enterprise application

  1. Go to Enterprise apps β†’ click New application

  2. Select Create your own application β†’ type in a suitable name e.g. revel8 β†’ click create

βš™οΈ 3: Configure Application

  1. Go to the provisioning tab within the revel8 application

  2. Setup the provisioning with the following parameters:

    • Provisioning Mode: Automatic

    • Authentication Method: Bearer Authentication

    • Tenant URL: (paste the SCIM URL from Step 1)

    • Secret Token: (paste the token from Step 1)

🧩 4: Configure Attribute Mappings

Following microsoft SCIM attributes are needed to fully integrate with the revel8 platform:

  1. Users: [UserName, active, name.givenName, name.familyName, emails[type eq "work"].value, urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager, phoneNumbers[type eq "work"].value], preferredLanguage, title

  2. Groups: [DisplayName, members]

  3. Make sure to Test your Connection.

πŸ‘₯ 5: Assign groups

  1. Simply assign the required users or groups to the revel8 application

  2. As an alternative, also all groups in scope can be synced by checking the designated button under the provisioning setup

  3. Click Start provisioning

πŸ“Œ Requirements and Limitations

  • The SCIM integration with revel8 is limited to data from Microsoft Azure Entra ID. On-premise Active Directories are not supported

  • It only allows for the connection of a single Azure tenant. All user data must be managed within one Azure tenant, as connections to multiple tenants are not supported

  • Once a SCIM connection is established, user administration must be done solely through Azure Entra ID on your end. Importing users through Excel or CSV files is no longer an option

  • The system supports individual email addresses only. Group or shared email addresses are not supported

  • To provision Azure security groups, an β€œAzure Active Directory Premium P1” license or higher is required. Without this license, users must be added to the revel8 application individually


βœ…Final Checklist

  • SCIM configuration generated in revel8 (URL & Token saved)

  • Enterprise application created in Microsoft Entra

  • Provisioning mode set to Automatic

  • SCIM Tenant URL and Secret Token added in Microsoft Entra

  • Attribute mappings configured or confirmed

  • Test Connection successfully passed

  • Required groups assigned to the application

  • Provisioning started and users/groups visible in revel8

Did this answer your question?