Configuring Azure AD SCIM v2.0
Learn about syncing your app with Azure AD SCIM v2.0
Introduction
This guide outlines how to synchronize your application's Azure AD directories using SCIM v2.0.
To synchronize an Enterprise's users and groups provisioned for your application, you'll need to provide the Enterprise with two pieces of information:
- An Endpoint that Azure AD will make requests to.
- A Bearer token for Azure AD to authenticate its endpoint requests.
Both of these are available in your Endpoint's Settings in the Developer Dashboard.
Steps 2, 3, and 4 below will need to be carried out by the Enterprise when configuring your application in their Azure AD instance.
1

Click "Add new endpoint".

Input your Enterprise's name, and select "Azure AD SCIM v2.0" from the dropdown.
Then, click "Create endpoint."
We have support for whitelabeled URLs for Directory Sync endpoints. Contact us for more info!

3

Select "Provisioning" from the "Manage" section found in the navigation menu.

In the "Admin Credentials" section, copy and paste the Endpoint from your Developer Dashboard in the "Tenant URL" field.
Then, copy and paste the Bearer Token from your Developer Dashboard into the Secret Token field.
Click "Test Connection" to receive confirmation that your connection has been set up correctly.
5

Confirm the "Provisioning Status" is set to "On" and that the "Scope" is set to "Sync all users and groups."
Begin provisioning users and groups and witness realtime changes in your WorkOS Developer Dashboard.