❗Important

In order to set up Azure SCIM, you must first set up SSO for Azure. You must be a Guru Admin to set up SCIM for your team.


Setting up SCIM through Microsoft Azure

1. Open the SSO/SCIM page in Team Settings​ and toggle ​"Authorize SCIM Provisioning" to on. You must be an Admin to turn on SCIM for your team. If you don't see the option to turn SCIM on, please reach out to your Account Manager or support@getguru.com to ensure that it is in your Guru plan.

2. Navigate to your Apps landing page in Azure, and select Provisioning under the “Manage” section in the left column to get started.

3. Identify Automatic as your “Provisioning Mode"

 Setting up SCIM for Azure

4. For “Admin Credentials” enter the following:

  • Tenant URL - https://api.getguru.com/api/scim/v2/

  • Secret Token - Copy the SCIM Username and SCIM Token fields from Guru, then paste both of these into this field separated by a colon.

  • Confirm by selecting Test Connection (you should see confirmation in the top right corner of the page.)


✍️ Note

To continue on to the next step you may need to refresh your page or select save. Then, back on the Guru app landing page, select Edit Provisioning at the top of the screen.


Provisioning Azure Active Directory Users:

1. Under “Mappings,” choose Provision Azure Active Directory Users:

Setting up SCIM for Azure Provisioning

2. Your Attribute Mappings should mirror those listed below.

  • Capitalization matters.

  • Ensure that Create, Update, and Delete are checked off.

  • The customappsso Attribute externalID needs to be updated from the default value.

3. Save these settings.

SCIM for Azure Attribute Mappings

Provisioning Azure Active Directory Groups:

1. Under “Mappings,” choose Provision Azure Active Directory Groups.

2. Your Attribute Mappings should mirror those listed below:

  • Capitalization matters.

  • Ensure that Create, Update, and Delete are checked off.

Attribute Mappings:

Azure Active Directory Attribute:

custommapsso Attribute:

Matching preference

displayName

displayName

1

objectid

externalId

members

members

3. Save these settings.

Did this answer your question?