Create and disable users automatically with SCIM user provisioning

You can automatically create and disable users with SCIM user provisioning in Microsoft Entra ID.

System for Cross-Domain Identity Management (SCIM) is an open standard protocol for automating the exchange of user identity information between identity domains and Orchidea.

This is how you create a SCIM integration between Orchidea and Microsoft Entra ID:

1. Move to workspace admin => User management and open the SCIM tab.
   1. Click Create new SCIM secret.
   2. Select in Chosen IDP the IDP that you want to assign in Orchidea for the new users that are created with the SCIM integration
   3. Copy both the SCIM URL and SCIM secret to your notes to be used later in the process
      
2. Move to the Microsoft Entra admin center and open Applications => Enterprise applications. Click the related list item to open the SSO integration created between Entra ID and Orchidea.
   
3. Open Provisioning
   
4. Select Automatic in Provisioning mode
   
5. Fill in the information that you copied earlier in 1.c and test the connection
   1. Fill the SCIM URL from 1.c to Tenant URL
   2. Fill the SCIM secret from 1.c to Secret Token
   3. Click Test Connection
6. Save the credentials
   
7. Open Mappings
8. Click on Provision Microsoft Entra ID Users
   
9. Delete in Attribute Mappings all other attributes except
   1. userName
   2. externalId
   3. active
   4. name.givenName
   5. name.familyName
      
10. Edit userName attribute
    
11. Change Source attribute to "mail" and click Ok
    
12. Edit externalId attribute
    
13. Change
    1. Source attribute to "objectId"
    2. Match objects using this attribute to "Yes"
    3. Matching precedence to "2"
    4. Save changes by clicking Ok
       
14. Select in Settings whether you want to synchronize with SCIM
    1. Only assigned users or groups or
    2. All users and groups
       
15. Save the SCIM settings
    
16. Start provisioning with SCIM