---
title: "Microsoft Entra SCIM Integration Guide for Scalefusion"
slug: "scim-integration-with-microsoft-entra"
updated: 2026-01-15T10:55:10Z
published: 2026-01-15T10:55:10Z
canonical: "help.scalefusion.com/scim-integration-with-microsoft-entra"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra SCIM Integration Guide for Scalefusion

This guide walks you through setting up the SCIM integration with Scalefusion and provisioning users and groups via Microsoft Entra.

## Pre-requisite

1. [SCIM Connector](/docs/introduction-4#configure-scim-connector-on-scalefusion-dashboard) should be configured on Scalefusion Dashboard.
2. For automatic group provisioning admin should require Entra ID P1 / P2 license.

## Step 1: Create SCIM Application & Basic Settings

1. In Microsoft Entra admin console, navigate to **Enterprise apps** and click on **New Application** to add a new application.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-UFUDDSOT.png)
2. Next, click on **Create your own application**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1759919451936.png)
3. Provide a name for the application and click on **Create**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-7FX47YEG.png)
4. In the application’s **Provisioning** tab, click on **Overview** and click on **Get Started**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-NNHJMSVN.png)
5. In the Provisioning Mode, select **Automatic** from the drop-down
6. Enter the **Base URL / Tenant URL** (Copy SCIM API Endpoint from Scalefusion Dashboard) for your SCIM endpoint.
7. In the **Secret Token** field, paste the token (Bearer Token from Scalefusion Dashboard).
8. Click on **Test Connection** to verify the Base URL + Token are valid

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-DG4F8R0Z.png)
9. Once authorized, click **Save** on top
10. Now refresh the page
11. Under **Settings > Scope**, select **Sync only assigned users & groups**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-8JSQK0BL.png)
12. Set **Provisioning Status** to **On**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-GM1R6R1H.png)

## Step 2: Add Users to the Application

1. In Microsoft Entra console, navigate to **Users** > **New User** > **Create New User**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-5I67NIJM.png)
2. Fill in the user details and click on **Review + create**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-NQXNBPYS.png)
3. Review the details and click on **Create**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-SQNP58X1.png)
4. The user will be created and displayed in Users section.

## Step 3: Add Groups & Assign Users to Group

1. Navigate to **Groups** in your directory. Click on **New Group**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-GWSCHMMQ.png)
2. Provide a name for the group and click on **Create**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-8ULYP1P2.png)
3. **Add the user(s)** you created earlier, into this group. To do so,
  1. Navigate to **Users** and search for the user you have created (in Step #2 above)
  2. In **Groups > All Groups**, search for the group in which you have to add user(s). Click on the group name. This will open the group page.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-F31H7RXF.png)
  3. On the group page, click on **Members** in the left menu

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-FB13TUBK.png)
  4. Click on **Add Members**. In the right side panel search for the user you want to add.
  5. Select the user and click on **Select** button at the bottom

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-NNZRIEAP.png)
  6. The user will be listed in the **Members** section under the group page.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-Z0IXUYOW.png)

## Step 4: Assign Group to the SCIM Application

Once you’ve set up the group membership, the next step is to assign the group to your SCIM application. This ensures the group is included in the provisioning scope. To assign a group to the SCIM application:

1. In the admin console, navigate to **Enterprise Apps** from the left-hand menu and search for your SCIM application.
2. Select the app, then go to **Users & Groups**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-LHH8PY96.png)
3. Click on **Add User/Group** to open the **Add Assignment** page.
4. Click on **None Selected** to open the selection panel.
5. On the right panel, search for the group you want to assign.
6. Select the group and then click **Select** at the bottom of the panel.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-9477QS3R.png)
7. The selected group will now appear as assigned, showing **1 group selected**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-KNYISX66.png)

> [!NOTE]
> Users can also be assigned in similar manner

The group and its users will now sync to the Scalefusion dashboard (in 40 minutes). Once synced, the group and its users will appear in the Scalefusion dashboard.

- If individual users are provisioned, they will be listed under the **User Enrollment** section.
- When a group is provisioned, both the group and its associated users will appear under the **User Groups** section. The associated users will also be listed under the **User Enrollment** section.

## Provision on Demand

By default, user and group synchronization occurs automatically at a set interval of 40 minutes. However, if you need to trigger provisioning immediately without waiting for the next scheduled sync, you can use the **Provision on Demand** feature.

### How to Trigger Provisioning on Demand

1. Navigate to **Enterprise Apps** in your admin console and select the SCIM application you have configured.
2. Click on the **Provisioning** tab, then select **Provision on Demand**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-5SA68OCH.png)
3. In the **Select a user or group** field, search for and select the specific user or group you want to provision immediately.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-25M281JS.png)
  - **Note:** When selecting a group, you also need to select the individual users within that group. The interface will show the selected users under **View Members Only**.
4. Once your selection is complete, click the **Provision** button at the bottom to start the immediate provisioning process.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-D32ITAHE.png)

This feature is useful for pushing critical updates or new users/groups to the target system without waiting for the next scheduled sync.