Manage user and group identities in Process Street with SCIM via Azure Active Directory.

SCIM (System for Cross-Domain Identity Management)  allows you to add and remove users or teams of users that you have set up in Azure AD.

Securely set up user roles and access to Process Street programmatically.

Plan: SCIM is an Enterprise add-on. If you are interested in enabling SCIM for your company, contact our support team, your CSM or your Account Executive.

Users: To create an API key you must be an administrator.

Docs: SCIM | Azure Active Directory 

SCIM Configuration for Azure AD

To enable SCIM on your account you will need to have your organization domain(s) registered in Process Street. Contact our support team to set this up for you.

There are three steps to set up SCIM with Process Street:

1. Create and connect the SCIM application
2. Create application roles
3. Enable provisioning

1. Create/Connect the Process Street SCIM Application

• From the tenant overview screen click Enterprise Applications on the left
• Click +New application
• On the “Browse Azure AD Gallery” page, click Create your own application
• Name it Process Street
• Choose the option to integrate any other application you don’t find in the gallery
• Click Create

2. Create Application Roles

• Navigate back to your tenant overview screen
• Click App Registrations on the left
• Select the All Applications tab
• Click the application you created (Process Street)
• Click App roles on the left
• Click Create app role
• Set the Display name to “FullMember”
• Set allowed member types to Users/Groups
• Set the Value to “FullMember”
• Add a description
• Leave “enable this role” checked
• Click Apply
• Repeat the above for each Process Street user type: Admin, Guest, and FreeMember

3. Enable Provisioning

• Navigate back to your tenant overview screen
• Click Enterprise applications from the left, then click the app name (Process Street)
• Click Provisioning on the left and click Get started
• Set the provisioning mode to automatic
• When prompted to enter the URL, use https://public-api.process.st/api/scim
• For the secret token, enter the value (not label) of your Process Street API key

Generate your API key in Process Street

You can generate and name a new API key from the integrations page in your Process Street organization manager area.

The name of your API key will show in notification emails sent to users you have provisioned, so it’s best practice to change the default label to avoid confusion.

• Click Test connection to verify your details were entered correctly
• Click Save
• Click the Mappings dropdown
• Click Provision Azure Active Directory Users or Provision Azure Active Directory Groups
• Set attribute mappings
• Click Save
• Click the X in the upper right corner
• Ensure the Provisioning Status slider is set to On, click Save after toggling it if necessary
• If provisioning is not started, click Start provisioning
• Wait for provisioning to take place

Check that the users have been added correctly to your Process Street organization.

FAQ

What happens if I add a group of users from Azure AD?
All users in that group will be added to Process Street with the user role you have selected for that group.

Do I need our domain set up in Process Street to enable SCIM?
Yes, to add your domain(s) into Process Street please reach out to our support team who can set this up for you.

Can I change a user’s email address via SCIM?
Yes but only if you have a domain set up in Process Street (see above).

Can I change a user’s password via SCIM?
No, only a user can update their own password.
Note: SCIM works best with SSO which allows you to control passwords.

What if a user is part of more than one organization in Process Street, can I change their email address?
It’s only possible to change the email addresses that have the same domain as your organization’s domain.

• Learn the 5 stages of process building in our Getting started guide
• Watch helpful videos and webinars on our YouTube channel
• Learn about Process AI
• Collect info with Forms
• Organize data with Data Sets
• Get started with Pages
• Get inspired by our Blog