SCIM Integration with Permit.io via Entra ID (Azure AD)
Connecting SCIM with Permit.io
This guide will walk you through integrating SCIM with Permit.io using Entra ID (Formerly Azure Active Directory). SCIM (System for Cross-domain Identity Management) allows you to manage user identities seamlessly across systems.
Prerequisites
Before you start, ensure you have the following:
- Permit API Key (How to get Permit API Key)
- Permit's project ID and environment ID (How to find Permit's project ID and environment ID)
- Entra ID account
Configuring Entra ID with SCIM
- Log in to your Entra ID account.
- Click on the
Enterprise applications
tab under theApplications
section.
Click on the
New application
button.Click on the
Create your own application
button.Enter the name of the application and click on the
Create
button.(Optional) Add users and groups to the application in the
Users and groups
tab.Now on the
Provisioning
tab, click on theGet started
button and select theAutomatic
Provisioning mode.Enter the following details:
Tenant URL: https://scim.permit.io/scim/v2/{permit_project_id}/{permit_env_id}
- Optional: base URL for EU users
https://scim.eu-central-1.permit.io/scim/v2/{permit_project_id}/{permit_env_id}
.
Replace {permit_project_id}
and {permit_env_id}
with your Permit project ID/Key and environment ID/Key respectively
Secret Token: Your Permit API Key - (How to get Permit API Key)
- Click on the
Test Connection
button to verify the connection, then click on theSave
button.
Testing the SCIM Integration
You can now test the SCIM integration by creating a new user in Entra ID and verifying if the user is created in Permit.io.
Create a new user in Entra ID and assign it to the application you created - following step 6 from before.
After clicking on the
Provisioning
tab, go toProvision on demand
.There, you can provision the user to Permit.io by searching the user and clicking on the
Provision
button.You can take a look at the
Provisioning logs
to see the status of the user provisioning.You can also verify the user in the Permit dashboard - and as you can see, the user has been successfully created !