Skip to main content
SCIM (System for Cross-domain Identity Management) lets you automatically sync users and groups from Microsoft Entra ID. Once set up, user management becomes seamless—no more manual updates.
Before you start make sure you’ve already generated the SCIM token for your team. See how to obtain your SCIM Token

Steps to set up user provisioning

1. Create an enterprise application in Entra ID

  1. Sign in to the Microsoft Entra admin center.
  2. Go to Identity > Applications > Enterprise applications.
  3. Select + New application.
  4. Choose Create your own application.
  5. Enter a name (for example, Kinship Provisioning).
  6. Select Integrate any other application you don’t find in the gallery (Non-gallery).
  7. Click Create.

2. Configure SCIM provisioning

  1. In your new Enterprise Application, go to Provisioning in the left menu.
  2. Under Provisioning Mode, select Automatic.
  3. Under Admin Credentials:
  4. Click Test Connection to verify.

3. Enable user and group provisioning

  1. Once the connection is successful, click Save.
  2. Under Mappings, make sure both options are enabled:
    • Provision Azure Active Directory Users
    • Provision Azure Active Directory Groups
  3. Set Provisioning Status to On.
That’s it—your users and groups in Entra ID will now stay in sync automatically.

Troubleshooting

If something doesn’t work the first time, here are a few common things to check:
  • Test Connection fails
    • Double-check your Tenant URL. It should match exactly what you copied.
    • Make sure your SCIM token hasn’t expired.
  • Users aren’t syncing
    • Confirm that Provision Azure Active Directory Users is enabled under Mappings.
    • Ensure the Provisioning Status toggle is set to On.
  • Groups aren’t syncing
    • Check that Provision Azure Active Directory Groups is enabled.
    • Verify that the groups you want to sync in Entra ID are assigned to the application.
  • Changes take time
    • Provisioning isn’t instant—Microsoft Entra ID runs provisioning on a scheduled cycle (usually every 40 minutes). Allow some time for changes to appear.