> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kinship.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Set Up SCIM User Provisioning with Microsoft Entra ID

> Learn how to set up the SCIM (System for Cross-domain Identity Management) which enables automatic synchronisation of users and groups between Microsoft Entra ID and Kinship. 

SCIM (System for Cross-domain Identity Management) lets you automatically sync users and groups from Microsoft Entra ID. Once set up, user management becomes seamless—no more manual updates.

<Note>
  Before you start make sure you’ve already generated the SCIM token for your team. See how to [obtain your SCIM Token](how-to-obtain-scim-token)
</Note>

***

## Steps to set up user provisioning

### 1. Create an enterprise application in Entra ID

1. Sign in to the [Microsoft Entra admin center](https://portal.azure.com/).
2. Go to **Identity > Applications > Enterprise applications**.
3. Select **+ New application**.
4. Choose **Create your own application**.
5. Enter a name (for example, *Kinship Provisioning*).
6. Select **Integrate any other application you don’t find in the gallery (Non-gallery)**.
7. Click **Create**.

### 2. Configure SCIM provisioning

1. In your new Enterprise Application, go to **Provisioning** in the left menu.
2. Under **Provisioning Mode**, select **Automatic**.
3. Under **Admin Credentials**:
   * Enter your **Tenant URL** in the *Tenant URL* field.\
     👉 [How to find your Tenant URL](how-to-obtain-scim-token)
   * Enter your **SCIM token** in the *Secret Token* field.
4. Click **Test Connection** to verify.

### 3. Enable user and group provisioning

1. Once the connection is successful, click **Save**.
2. Under **Mappings**, make sure both options are enabled:
   * *Provision Azure Active Directory Users*
   * *Provision Azure Active Directory Groups*
3. Set **Provisioning Status** to **On**.

That’s it—your users and groups in Entra ID will now stay in sync automatically.

***

## Troubleshooting

If something doesn’t work the first time, here are a few common things to check:

* **Test Connection fails**
  * Double-check your Tenant URL. It should match exactly what you copied.
  * Make sure your SCIM token hasn’t expired.

* **Users aren’t syncing**
  * Confirm that *Provision Azure Active Directory Users* is enabled under **Mappings**.
  * Ensure the **Provisioning Status** toggle is set to **On**.

* **Groups aren’t syncing**
  * Check that *Provision Azure Active Directory Groups* is enabled.
  * Verify that the groups you want to sync in Entra ID are assigned to the application.

* **Changes take time**
  * Provisioning isn’t instant—Microsoft Entra ID runs provisioning on a scheduled cycle (usually every 40 minutes). Allow some time for changes to appear.

***

{/* Review the guide on [Managing User Groups via SCIM](#). */}