How to undertake SCIM provisioning with Azure AD?

How to undertake SCIM provisioning with Azure AD?

Vizmo SCIM integration with Azure Active Directory will allow you to provision, deprovision and change user profile details like name and email address in Azure AD, which automatically updates Vizmo Directory. You will no longer need to update both Azure AD and Vizmo Directory separately with these actions as it will all be synced from Azure AD.
Notes:
  • SCIM integration is available to Vizmo Enterprise Plan customers.
  • SCIM provisioning changes can only be synced from Azure AD to Vizmo directory, not the other way round. 
  • You can still create users manually in Vizmo directory if you have users that you don’t need or want to push from Azure AD, eg. contractors or temporary staff.

Configure SCIM Provisioning with Azure AD

  1. To enable SCIM Provisioning for Vizmo, first go to your location for which you want to enable SCIM integration and access Integrations.
  2. Click Add Integration, then click Add button of SCIM integration. 
  3. Above step enables the SCIM integration for the current location and generates Tenant URL and Secret Token which needs to be used when setting up the integration in the Azure AD portal. 

Creating a New Enterprise Application on Azure AD

  1. Access your Azure AD account.
  2. Go to Enterprise Application and check if there was any previous integration with the name of Vizmo.
  3. If not, click on New application
  1. It will then take you to browse for applications. Since, Vizmo is not a part of the gallery, a new application will have to be created on your Azure AD account
  1. Click on Create your own application and enter the name of your app. eg: Vizmo Delhi.
  2. Select the last option from the choices provided. ie: integrate any other application you don't find in the gallery (Non-gallery).
  3. Click on Create to start using this enterprise application
Note: A new enterprise application will have to be created every time an integration has to take place for a new location.

Steps to undertake Provisioning:

Admin Credentials:

  1. Click on the newly created enterprise application 
  1. Click on Get Started or go to the Provisioning tab
  2. Select provisioning mode as Automatic.
  3. Expand Admin Credentials to enter Tenant URL and Secret Token details
  1. Copy the Tenant URL and Secret Token into Azure AD from Vizmo portal 
  2. Click Test Connection to check connectivity.

Mappings:

  1. Expand Mappings under Provisioning
  2. Here, by default there are two types of directories that are enabled.
  1. Click on Provision Azure Active Directory Groups
  2. Disable Groups for Attribute Mapping as this function is not available for Mapping with Vizmo
  3. Save the changes
  1. Click on Provision Azure Active Directory Users
  2. Ensure that Attribute mapping is enabled.
  3. Save changes

Note: When userPrincipalName is not mapped to employee mail

  1. Click on userPrincipalName
  2. Edit Source attribute by selecting mail from the dropdown
  3. Click on Ok to confirm changes

Settings: 

  1. Expand Settings. Here you can enter an email address if you wish to receive alerts from Azure about errors.
  1. Scope can also be changed if required between assigned and all users and groups
  2. Please make sure that the provisioning status is On to get provisioning information

Start Provisioning

  1. After the provisioning settings are done, go to the Overview page and start provisioning.
  2. You will be able to see the progress of integration on the Overview page. Provisioning can also be restarted if required.