Entra ID SCIM Provisioning Rate Limits for Non-Gallery Apps

Question

Hello,

We've recently implemented SCIM provisioning support for Microsoft Entra ID integration with our application. We've successfully configured it as a non-gallery application.

However, we're facing a potential challenge with rate limits due to the high volume of provisioning requests that Entra ID can generate for some of our customers who have thousands of employees. We understand that gallery applications allow for rate limit enforcement from Entra ID's side.

As of March 4th, 2025, the Microsoft documentation clearly states that new application submissions to the Entra application gallery are currently suspended (reference: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/v2-howto-app-gallery-listing).

Given this limitation, we're seeking alternative solutions to manage and mitigate potential rate limit issues with Entra ID's SCIM provisioning for our non-gallery application. Specifically, we'd like to know:

• Are there any recommended best practices or configurations for non-gallery applications to control or manage the rate of SCIM provisioning requests from Entra ID?
• Are there any upcoming changes or workarounds planned by Microsoft to address rate limit management for non-gallery SCIM provisioning, especially during the gallery submission suspension?
• Is there a possibility to request an exception or get assistance from Microsoft support to get some kind of rate limiting applied in our specific case, even if we are not a gallery application?
• Are there any other alternatives we should consider to prevent our application from being overwhelmed by Entra ID provisioning requests?

We appreciate any guidance or insights you can provide.

Thank you

Answer 1

Hello @Vital ,

Thank you for reaching out Microsoft Q&A.

I understand recently you implemented SCIM provisioning support for Microsoft Entra ID integration with your application.In Which you have configured it as a non-gallery application.
You are facing a potential challenge with rate limits due to the high volume of provisioning requests that Entra ID can generate for some of your customers who have thousands of employees. I understand that gallery applications allow for rate limit enforcement from Entra ID's side.

Yes, as off now Rate limiting only exists at this time for apps in the gallery that have been developed and onboarded by Microsoft. Custom non-gallery apps do not have any rate limiting available.

1. As off now there is no alternative for non-gallery applications to control or manage the rate of SCIM provisioning requests from Entra ID.
2. There are no updates or workarounds planned by Microsoft to address rate limit management for non-gallery SCIM provisioning, especially during the gallery submission suspension, if any it will be notified officially.
3. There is no way to rate limit the requests coming from Entra ID to your app. If you submit a request for a gallery application with a SCIM provisioning integration, a rate limit can be set.
4. The only possible to prevent your application from being overwhelmed by Entra ID provisioning requests is by SCIM Provisioning Rate Limit but which is not possible for the Non-Gallery apps.

However, you can provide feedback on your issue in the FeedBack-Forum so that our PG team can review the product requirements. This will help us in enhancing the features.

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.