Automatically provide SCIM mappings for SaaS applicaiton

Lukas Patecki 21 Reputation points
2020-10-08T11:36:53.197+00:00

I integrating Azure AD user management to an existing SaaS application, and I need to know users objectID.

It's required so I can match the user created on the server via SCIM automated provisioning, with an individual that presents a token with an oid claim.

I can ask the administrator for each of the clients to manually add a mapping from objectId to externalId, yet it's poor user experience. How can I automatically alter the default mapping as shown here: https://video2.skills-academy.com/en-us/azure/active-directory/app-provisioning/customize-application-attributes#editing-user-attribute-mappings ?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,367 questions
Accepted answer
  1. Danny Zollner 10,056 Reputation points Microsoft Employee
    2020-10-08T16:54:46.383+00:00

    The best approach here is to get your SaaS application listed in the Azure AD App Gallery - see: https://video2.skills-academy.com/en-us/azure/active-directory/develop/v2-howto-app-gallery-listing

    Our integrated gallery applications have schemas/mappings customized to fit the SaaS app's needs. The generic non-gallery app SCIM connector has a default set of attributes/mappings, and those will always remain the same and can't be automatically changed. It's possible to update the schema/mappings for an existing provisioning configuration via MS Graph and just hand the customer a schema that they need to upload, but I think that's likely more work than having them add the objectId -> externalId mapping in the UI. In any case, reference docs on our API for management of the schema is here: https://video2.skills-academy.com/en-us/graph/api/synchronization-synchronizationschema-update?view=graph-rest-beta&tabs=http

    1 person found this answer helpful.
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.