Breadcrumbs

Setting up Azure/Entra SCIM

Prerequisites

  • A publicly accessible Square 9 Identity Manager website with a valid domain name and matching https certificate.

  • Test that the end point works correctly by visiting the endpoint /scim/v2/ServiceProviderConfig

  • Square 9 Identity Manager API key (S9IM).

Setup

  1. Login to Azure AD as an Administrator.

  2. Search for and select Enterprise Applications.

  3. Click New application.

370c23a2-3916-453a-9cd2-4b257dd1ad11.png

  1. Select Create your own application.

    1. Select Integrate any other application you don’t find in the gallery (Non-gallery).

Screenshot from 2025-11-11 15-55-50.png

  1. In the Overview → Manage menu, select Provisioning.

Screenshot from 2025-11-11 15-57-45.png

  1. Choose Automatic.

  2. The Tenant URL should be pointing to https://yourdomain.com/scim/v2

For Square 9 cloud users, the capture- url (https//capture-yourdomain.mysquare9.com/scim/v2) should be leveraged due to how s9im is set up in cloud environments. You should NOT use your GlobalSearch URL.

  1. The Secret token is your S9IM API Key.

Screenshot from 2025-11-11 15-58-37.png

Azure Attribute Mapping Configuration

  1. Access “Attribute Mapping” in the sidebar

  2. Remove attributes from the “Users” mapping section until the following are left as depicted in the screenshot below

        1. userPrincipalName

        2. displayName

        3. givenName

        4. mail

        5. mailNickname

        6. manager

        7. surname

        8. Switch expression mapping for active value

Users Attribute Mapping

unnamed (3).webp

Group Attribute Mapping

No changes are needed to the default Groups attribute mapping, the mapping should appear as depicted below

  1. displayName

  2. members

  3. objectId

Screenshot from 2026-10-01 14-55-38.png


Provisioning

If you are using SCIM with Entra AD, there is a relay appliction that needs to be configured. Please contact Square 9 Support for assistance.