EntraID SCIM app with Client-Secret

Question

To Whom it may concern,

We are working on EntraID Scim integration for an on-premise application. We have tested successfully our work against a SCIM Enterprise Application template.

The problem is we are not able to figure out, how our customers could configure their Enterprise Applications to use Client-Secret?

The option with a token that expires faster than two rounds of SCIM synchronization sessions doesn't sound viable and we do not support long-living tokens.

Thank You very much for any suggestions.

Best regards,

Michał

Answer 1

Hello @Michał Prociów,

Thank you for posting your query on Microsoft Q&A.

Based on your description, I understand that you're looking to configure a client secret for SCIM integration with an on-premise application via EntraID (Azure AD), and you're seeking guidance on how your customers can set this up for Enterprise Applications. Client secrets are typically configured through App Registrations, not directly in the Enterprise Application settings. Here’s a general guide for you and your customers to configure client secrets:

1)Login to Azure Portal (https://portal.azure.com/)"https://portal.azure.com/)")

2)Search for and select Microsoft Entra ID.

3)Select App registrations and select your application from the list.

4)Select Certificates & secrets.

5)Select Client secrets, and then Select New client secret.

6)Provide a description of the secret, and a duration.

7)Select Add.

Reference: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/use-scim-to-provision-users-and-groups This guide provides detailed instructions on building a SCIM endpoint and integrating it with the Microsoft Entra provisioning service.

Thank you,
Chaithra E.