SCIM Provisioning Setup Guide for Microsoft Entra

This guide walks you through configuring SCIM user provisioning from Microsoft Entra ID (Azure AD) to Intellischool using a custom enterprise application.

Intellischool supports the SCIM 2.0 standard out-of-the-box, so no custom attribute mappings or schema extensions are required.

🔧 Prerequisites

Before starting, ensure you have:

• Admin access to Microsoft Entra ID
• Your Intellischool deployment ID
• A valid SCIM bearer token from Intellischool

🌐 SCIM Endpoint

Use the following base URL:

Replace :deploymentId with your actual deployment ID.

Example:

1. Go to Microsoft Entra Admin Center
2. Navigate to:
   • Applications → Enterprise applications
3. Click + New application
4. Select:
   • + Create your own application
5. Enter a name:
   • Example:
     Intellischool SCIM
6. Choose:
   • “Integrate any other application you don’t find in the gallery (Non-gallery)”
7. Click Create

Step 2: Enable Provisioning

1. Open your newly created application
2. In the left menu, click Provisioning
3. Click Get started

Step 3: Configure SCIM Connection

Set the following values:

Test the Connection

Click:

👉 Test Connection

You should see a success message if everything is configured correctly.

Step 4: Attribute Mappings

Good news: No changes required.

Intellischool supports Entra’s default SCIM mappings.

You can confirm:

1. Go to Provisioning → Mappings
2. Open:
   • Provision Azure Active Directory Users

Ensure defaults are present (they should be).

Step 5: Assign Users or Groups

Provisioning only applies to assigned users.

1. Go to Users and groups
2. Click + Add user/group
3. Select:
   • Users and/or groups to provision
4. Click Assign

Step 6: Enable Provisioning

1. Return to Provisioning
2. Click Start provisioning

🔄 What Happens Next

• Entra will begin syncing users to Intellischool
• Initial sync may take a few minutes
• Subsequent syncs run automatically (~every 40 minutes)

🧪 Testing & Validation

To confirm everything is working:

• Check Provisioning logs in Entra
• Verify users appear in Intellischool
• Test:
  • User creation
  • Updates (name/email changes)
  • Deactivation (user disabled in Entra)