SCIM provisioning keeps your Vizmo employee directory in step with Microsoft Entra ID (formerly Azure Active Directory). When you add, change or deactivate someone in Entra, Vizmo updates the matching employee automatically, so you no longer update both systems by hand.

Availability: if this option is greyed out or missing, contact your Vizmo account manager.

Before you start

• You are a company admin in Vizmo, and you can create enterprise applications and configure provisioning in Microsoft Entra ID.
• Provisioning goes one way, from Entra to Vizmo. Changes you make in Vizmo are not sent back to Entra.
• You can still add people manually in Vizmo, for example contractors or temporary staff that you do not want to push from Entra.
• Decide which locations should receive the provisioned employees. You can add Location Mapping Rules to send only some people to a location, for example by department. A location without a rule receives everyone.

Part 1: Add SCIM in Vizmo

1. Sign in to the Vizmo portal, open Company View and select Integrations.
2. Select Add Integration. In Available Integrations, find SCIM and select Add.
3. Vizmo creates the integration straight away and shows a SCIM Endpoint/Tenant URL and a Bearer Token/Secret Token. Select Copy next to each one and keep the token somewhere safe until the Entra setup is finished.
4. Under Select locations where this integration should work, choose the locations that should receive the provisioned employees, or choose Select All.
5. Optional: to limit who is added to a location, select Select Location to add rules, choose the location and select Add Rule. A rule reads "When" followed by an attribute that Entra sends, a comparison such as Is and a value. When you add more than one rule, join them with And or Or.
6. Select Done. Vizmo confirms that the SCIM integration was updated.

Note: Vizmo shows the bearer token only once. If you close the panel without copying it, you cannot see it again. Provisioning also does not work until you have chosen at least one location and selected Done.

Part 2: Create the application in Entra

You only do this once. One Entra application serves every location you selected in Vizmo.

1. Sign in to the Microsoft Entra admin center.
2. Go to Enterprise applications and check whether a Vizmo application already exists. If not, select New application.
3. Select Create your own application.
4. Enter a name, for example Vizmo SCIM Provisioning.
5. Choose the option to integrate any other application you don't find in the gallery (non-gallery), then select Create.

Part 3: Set up provisioning in Entra

1. Open the new application and select Provisioning.
2. Select New configuration (some Entra versions show Get started instead). If you are asked for a mode, choose Automatic.
3. Under Admin Credentials, paste the SCIM Endpoint/Tenant URL from Vizmo into Tenant URL, and the Bearer Token/Secret Token into Secret Token.
4. Select Test Connection. Continue only when the test succeeds, then create or save the configuration.

5. Open Mappings. Select Provision Microsoft Entra ID Groups, set Enabled to No and save. Vizmo does not use groups.

6. Select Provision Microsoft Entra ID Users and make sure it is enabled. Vizmo uses these attributes, so keep them mapped:

7. Vizmo treats userName as the employee's email address. If your users' userPrincipalName is not their email address, select the userName mapping, change Source attribute to mail, then select OK and save.

8. Open Settings. Optionally enter a notification email address to receive error alerts from Entra. Set Scope to Sync only assigned users and groups, set Provisioning Status to On and save.

Part 4: Assign people and start provisioning

1. In the application, select Users and groups, then Add user/group. Assign the people you want in Vizmo.
2. Go to the Overview page and select Start provisioning. Entra shows the progress on this page, and you can restart provisioning from here if needed.

If your Entra screens look different, see Microsoft's SCIM setup guide.

Check the result

After the first provisioning cycle, open Directory > Employees in one of the locations you selected and look for the provisioned people. Synchronisation is not instant, so allow time for Entra's cycle to run.

Pause provisioning

To stop Entra adding or changing employees, pause provisioning in Entra. Open your application, select Provisioning, set Provisioning Status to Off and save. A cycle that is already running can finish, and later cycles stay paused until you turn Provisioning Status back on. See Microsoft's guide to managing provisioning.

Note: the Enabled switch on the SCIM card in Vizmo does not currently stop requests coming from Entra, so do not rely on it to pause provisioning.

Things to know

• New people: Vizmo adds each person as an employee in every selected location where their details match the location's rule, or where there is no rule. Departments and job titles that do not exist yet are created for you.
• Deactivated people: when Entra marks someone as inactive, for example because you disabled them or removed them from the users and groups assigned to the application, Vizmo removes them from the employee directory in the selected locations and disables their Vizmo account. People who have an admin role stay in the directory, but their account is disabled. If the person becomes active in Entra again, the next cycle adds them back.
• Rules: if a person stops matching a location's rule, Vizmo removes them from that location. Employees you added manually in Vizmo, and people with the company-wide Admin role, are not removed this way. Location admins and people with custom roles are not protected.
• Change locations or rules later: on the Integrations page, select the pencil icon on the SCIM card, change the settings and select Done. A company can have one SCIM integration.
• Single sign-on: SCIM creates employees but does not sign them in. To let them sign in with their work account, see Set up SAML single sign-on (SSO).

Troubleshooting

• The Add button for SCIM is greyed out: SCIM is not enabled for your company. Contact your Vizmo account manager.
• Test Connection fails: check that you copied the full Tenant URL and token, and that the SCIM integration still exists in Vizmo.
• A person is not created: check that they are assigned to the application, that Provisioning Status is On, and review the provisioning logs in Entra.
• "User not saved in vizmo: location mapping rule failed" appears in the Entra logs: none of the selected locations accepted the person. Check the Location Mapping Rules in Vizmo against the attributes that Entra sends.
• The wrong email address or a duplicate person appears: Vizmo uses userName as the email address. Check that mapping in Entra (Part 3, step 7).
• A phone number is missing: Vizmo skips phone numbers it cannot read as valid for your company's country. Use the international format, for example +1 and then the number.
• The Vizmo form has a "For Azure AD" Click Here button: it does not open any instructions at the moment. Use this article instead.
• I lost the token: the token cannot be shown again. Delete the SCIM integration on the Integrations page, add SCIM again, and enter the new URL and token in Entra. Deleting the integration stops provisioning but does not remove employees that were already created.