1. Introduction
This guide explains how to configure SCIM synchronization between Microsoft Entra ID and the Amélio platform. It describes the main technical steps required to configure automatic user and group provisioning through SCIM.
The integration supports endpoints that comply with the SCIM 2.0 specification.
Note: This guide focuses exclusively on the technical configuration and synchronization steps. For more general information about integrating your Azure database, please contact us at [email protected]! 😊
2. Prerequisites
A Microsoft Entra ID tenant with an active subscription.
Appropriate administrative roles.
Valid email addresses: To send emails to users synchronized from Microsoft Entra ID, ensure that the mail (email) field is populated in Microsoft Entra user profiles.
3. Step-by-Step Guide to Configure SCIM Integration
3.1 Create and Configure an Enterprise Application in Microsoft Entra ID
Sign in to the Microsoft Entra admin center using an administrator account.
In the navigation menu, go to Microsoft Entra ID > Enterprise applications.
On the All applications page, select Create your own application (+).
Select Create your own application and enter a unique name (for example, Amélio SCIM Provisioning).
You will be redirected to the newly created enterprise application.
In the application menu, under Manage, select Properties to review or modify the application settings. The default values are generally sufficient, but you can adjust them to meet your organization's requirements.
3.2 Configure Provisioning in Microsoft Entra ID
Open the enterprise application you created in Microsoft Entra ID.
In the navigation menu, select Provisioning, then click Get started.
Set the Provisioning Mode to Automatic.
You must then contact Amélio at [email protected] to request the Tenant URL and the Secret Token. Make sure you have these in your possession before proceeding to the next step.
Under Admin Credentials:
Tenant URL: Enter the tenant URL you received from Amélio S (for example,
https://scim.amelio.co/scim/ba00000A-b000-0000-c000-de00f00gh).Secret Token: Enter the SCIM API token provided by Amélio.
Click Test Connection to verify communication between Microsoft Entra ID and the SCIM endpoint.
If the connection is successful, click Save.
Note: Microsoft Entra also provides the Integrate any other application you don't find in the gallery option. You can enter a unique name for your SCIM application and then click Create.
Important: While on the Provisioning tab, be sure to configure a Notification Email address and the associated notification settings.
This field is required to ensure the SCIM integration operates correctly.
Once the application has been created and Automatic provisioning has been configured, your enterprise application is ready to synchronize users and groups through SCIM.
4. Attribute Mapping
Attribute mapping determines how Microsoft Entra ID attributes are synchronized and mapped to the corresponding fields in the Amélio platform.
In your enterprise application, navigate to Provisioning > Mappings, then select Provision Microsoft Entra ID Users.
You can customize the attribute mappings to match your organization's requirements.
4.1 Default Attribute Mapping
Attribut SCIM Amélio | Attribut Microsoft Entra ID |
|
|
|
|
|
|
On the Provisioning > Mappings page:
Delete any attributes that you do not intend to synchronize by clicking Delete.
Click Save, then confirm by selecting Yes.
4.2 Custom Attribute Mapping
Microsoft Entra ID allows you to add custom attributes to enrich user profiles in Amélio.
Before configuring custom mappings:
Ensure that the custom attributes already exist in Microsoft Entra ID (within the user object) and are available for mapping.
Create the corresponding custom attributes in Amélio using the same attribute names.
Next:
Go to Mappings > Provision Microsoft Entra ID Users > Show advanced options > Edit attribute list for customappsso.
Add the destination attributes using the format required by Amélio, for example:
urn:ietf:params:scim:schemas:extension:amelio:2.0:User:customAttribute1, etc.).After adding the custom destination attributes, return to the Attribute Mapping page.
Click Add new mapping to map the Microsoft Entra ID source attribute to the corresponding Amélio destination attribute.
Save your changes.
Examples of Custom Attribute Mappings
Attribut Amélio | Attribut Microsoft Entra ID |
|
|
|
|
|
|
... | ... |
Important: The attribute names must match between Microsoft Entra ID and Amélio.
5. Assign Users to the SCIM Application
Follow these steps to assign groups (or users) to your SCIM application:
In the Microsoft Entra admin center, open the appropriate enterprise application.
In the navigation menu, go to Microsoft Entra ID > Enterprise applications, then open your enterprise application.
In the left-hand menu, select Users and groups.
Click Add user/group.
The Add Assignment dialogue box appears.
In the dialogue box, click Users and groups to display the list of available users and groups.
Select the user or group you want to assign, then click Select.
Click Assign to complete the assignment.
Once the assignment is complete, the selected users and groups are immediately included in the scope of provisioning from Microsoft Entra ID. During the next provisioning cycle, users are created or updated in Amélio according to your SCIM provisioning configuration.
6. Provision on Demand (Manual Provisioning)
On the Provisioning page, click Provision on demand.
Select the desired user and Click Provision.
Verify that the user has been successfully created in the Amélio platform.
This process allows you to test and manually provision a user to Amélio without waiting for the scheduled automatic synchronization cycle.
Congratulations! You have successfully configured SCIM integration between Microsoft Entra ID and Amélio. With this integration, user lifecycle management, including user creation, updates, and deactivation, is significantly simplified while ensuring automated synchronization of employee data between Microsoft Entra ID and the Amélio platform.