Setting up SCIM for Entra (Azure AD)

Overview

The Microsoft Entra provisioning service uses the SCIM 2.0 protocol for automatic provisioning. The service connects to the SCIM endpoint for the application, and uses SCIM user object schema and REST APIs to automate the provisioning and deprovisioning of users and groups. Extraordinary does not provide a Gallery App. 

Please create a custom Enterprise App to begin provisioning Entra users to Extraordinary.


 

Authorisation

The Extraordinary SCIM interface requires the use of a Client Credentials Grant for authorisation. 

Reach out to Extraordinary to be provided with a Client Id/Client Secret for use in authorising Entra's provisioning agent.

Tag Mappings

In order to provision Users into your Extraordinary organisation, ensure that the following tag mappings are set in the Attribute Mapping tab:

• userName: userPrincipalName
• name.givenName: givenName
• name.familyName: familyName
• phoneNumbers[type eq "mobile"].value: mobile
• externalId: employeeId (ExternalID is pulled into our platform as a freeform string. Public Transport salary sacrifices make heavy use of this ID - if you are using our public transport module, please ensure that this ID matches the key that will be placed in the reference field of salary sacrifices made by your payroll system)

If you get any issues completing the above setup, please reach out to our Support team here and we will forward your request to our Product team.