# Set-up SCIM for Azure

**Pre-requisites**

* Admin access to FenixPyre admin dashboard
* SAML SSO is already setup on FenixPyre dashboard
* Admin access to Azure active directory portal or Okta portal

**Note**- During set up, your identity provider will ask for an API token created through the OAuth 2.0 flow.

#### How to Set Up SCIM with Azure AD

* **Navigate to SCIM Settings:**
  * Go to `Settings` -> `Security` -> `Identity and Provisioning`.
  * Select `SCIM`.
* **Set Up SCIM:**
  * Click on "Set-up SCIM".
* **Select Directory Provider:**
  * From the "Select your directory provider" menu, choose `Azure AD`.

![scim\_ad.png](/files/FKJUgyY6RApmj8mgYEF0)

* **Give Your Application a Descriptive Name:**
  * Ensure your application has a clear and descriptive name for easy identification.

![scim\_10.png](/files/vdbNEkhYeF64gtDO8m9K)

* **Continue Setup in FenixPyre:**
  * On the FenixPyre dashboard, click “Continue to Next Step”.
  * Copy the provided Endpoint and Bearer Token.<br>

<figure><img src="/files/uKUAA3m0ARODrpU14Hey" alt=""><figcaption></figcaption></figure>

* **Paste Endpoint and Token in Azure:**
  * In the Azure Admin portal, navigate to the provisioning screen where you previously enabled provisioning(Check Prerequisite's document).
  * Paste the Endpoint and Bearer Token into the respective fields.<br>

<figure><img src="/files/MP2C1ThRdc3wwKUBPXIp" alt=""><figcaption></figcaption></figure>

* **Test Connection:**
  * Click on `Test Connection` to ensure the details are correct and the connection is successful.<br>

<figure><img src="/files/GNmE6YOtADUzlb2cVm5y" alt=""><figcaption></figcaption></figure>

* **Save Configuration:**
  * Click `Save` to save the provisioning configuration in the Azure Admin portal.

<figure><img src="/files/QwvvW64SaJGBox6NYDQv" alt=""><figcaption></figcaption></figure>

* **Configure User Attributes:**
  * On the same page, scroll down to find “Provision Azure Active Directory Users”.
  * Click on the attribute with `externalId`.
  * Change the value from `mailNickname` to `objectId`.
  * Ensure the attributes are mapped correctly
  * Save the attributes

<figure><img src="/files/8JrrSSUoOAurBKARzd98" alt=""><figcaption></figcaption></figure>

* **Return to FenixPyre Portal:**
  * Go back to the FenixPyre portal and click on “Continue to Next Step”.
* **Verify and Continue:**
  * Verify the details on the page and click on “Continue to Next Step” again.
* **Start Sync:**
  * Click on “Start Sync” to begin the synchronization process.<br>

<figure><img src="/files/a8BUfgT4ORRbLCti5NYz" alt=""><figcaption></figcaption></figure>

* **Add Users in Azure:**
  * In the Azure portal, go to the "Users and Groups" tab.
  * Click on `Add User`.
  * Select `None Selected`.

<figure><img src="/files/VBTWE2BL9I5tOGyhkvnL" alt=""><figcaption></figcaption></figure>

* Choose the users/groups to be added to the application.

<figure><img src="/files/smwOksN4x2D9LOA855wL" alt=""><figcaption></figcaption></figure>

* Click on the "Provision on Demand" tab.
* Select your user/group and click `Provision`.

<figure><img src="/files/AwzyDmg5l7Pcboe6KjSf" alt=""><figcaption></figcaption></figure>

* **Verify Success:**
  * The success screen should be visible on the FenixPyre dashboard.
  * You will also see SCIM marked as active in the SCIM tab.

<figure><img src="/files/VMRrpwm89LMtwOZaVyIo" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fenixpyre.com/fenixpyre-for-admins/admin-dashboard/identity-and-provisioning/scim/set-up-scim-for-azure.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
