Before you begin, ensure that you have a strategy in place to prevent being locked out of all admin accounts.
First you’ll need to log in to Unleash as an admin user. Navigate to the Single Sign-On section and select the “SCIM” tab. The SCIM API URL will be shown in this section, you’ll need this to configure Entra later.
Enable SCIM by turning on the toggle and keep the token Unleash provides you for the Entra setup below.
This guide assumes you already have an SSO application setup for Unleash. If you don’t already have an application configured, please see our guide on setting up SSO.
1) Navigate to “Enterprise Applications”
2) Navigate to your SSO Application
3) Navigate to provisioning
1) Navigate to the Provisioning overview
2) Set the Tenant URL
This the SCIM API URL provided by the Unleash UI in the configuring Unleash section.**
If you plan on deprovisioning users at any point with SCIM, you’ll also need to enable the SCIM compliance flag on Entra. This can be done by appending ?aadOptscim062020 to your URL.
3) Set the Secret Token
This was provided by the Unleash UI in the configuring Unleash section.
4) Save
1) Expand the mappings tab
2) Navigate to “Provision Microsoft Entra ID Users”
This was provided by the Unleash UI in the configuring Unleash section.
3) Remove unneeded properties
You should remove all unnecessary properties. This ensures that Entra will reach a steady state when synchronizing. The properties that you must retain are:
4) Update the email property to “userPrincipleName”
5) Save
1) Enable provisioning
2) Enable automatic provisioning
