{"id":6393,"date":"2024-06-10T08:00:37","date_gmt":"2024-06-10T08:00:37","guid":{"rendered":"https:\/\/www.process.st\/help\/docs\/scim-azure-ad\/"},"modified":"2026-01-21T16:57:47","modified_gmt":"2026-01-21T16:57:47","slug":"scim-azure-ad","status":"publish","type":"ht_kb","link":"https:\/\/www.process.st\/help\/docs\/scim-azure-ad\/","title":{"rendered":"SCIM User & Group Provisioning With Microsoft Entra ID"},"content":{"rendered":"

SCIM<\/a> (System for Cross-Domain Identity Management)\u00a0 allows you to add and remove users or teams of users that you have set up in Microsoft Entra ID<\/a> (Previously Azure AD).<\/em><\/p>\n

You can securely set up and manage user roles and their access to Process Street<\/a> with SCIM via Microsoft Entra ID.<\/p>\n

Users: To create an API key you must be an Administrator.<\/strong><\/em><\/p>\n

Note:<\/em><\/i><\/strong>This feature is only available in our <\/em><\/i>Enterprise<\/a>\u00a0plan. Please reach out to your\u00a0Customer Success Manager or our support<\/a> team if you\u2019re interested in accessing it.<\/em><\/i><\/p>\n

Preparations for this configuration<\/h2>\n

For this configuration, you must have SCIM enabled in your Process Street account and an SSO integration that supports SCIM provisioning.<\/p>\n

SCIM Configuration for Microsoft Entra ID<\/h2>\n

To set up SCIM user provisioning with Microsoft Entra ID, you first need to configure SCIM for your Microsoft Entra ID account, create application roles and enable provisioning through it.<\/p>\n

Create\/Connect the Process Street SCIM Application<\/h3>\n

Log in to your Microsoft Entra ID account and from the menu on the left, click Applications<\/strong> and select Enterprise Applications.\u00a0<\/strong><\/p>\n

On the Browse Microsoft Entra ID Gallery<\/em>\u00a0page, click Create your own application. <\/strong>Name this application as Process Street<\/strong>.<\/p>\n

From the options below, choose the option to integrate any other application you don\u2019t find in the gallery<\/em> and click Create<\/strong>.<\/p>\n

Create Application Roles<\/h3>\n

Once the application is created, go to the left menu and click Applications\u00a0<\/strong>then select App Registrations<\/strong>. Select the All Applications<\/strong> tab and select Process Street<\/strong> (the app you created).<\/p>\n

In the app, from the menu on the left, click App roles<\/strong>. Then click + Create app role<\/strong> in the top-center of your screen.<\/p>\n

Set the Display name<\/strong> of this user to Builder<\/em>. <\/p>\n

Set Allowed member types<\/strong> to Users\/Groups<\/em>. <\/p>\n

Set the Value<\/strong> to Builder<\/em> and add a description.<\/p>\n

Leave the option to enable this role<\/strong> as checked<\/em> and click Apply<\/strong>.<\/p>\n

\"\"<\/p>\n

Repeat the above process for each Process Street user type you want to add. For each user type you add, enter the value as shown below (the case doesn’t matter so ADMIN, Admin and admin are all equivalent):<\/p>\n