SCIM token apple business manager

Question

SCIM token apple business manager

Dino Scott 20

How to find which SCIM token I am using. As I have 2 different tokens registered, one expires this year and the other next year.

Am I ok to remove the one that expires this year leaving next years intact?

Screenshot 2025-04-22 at 09.35.00

Anonymous

2025-04-22T15:05:02.2166667+00:00

Hello Dino Scott,

Based on image apple Business Manager does not directly show which token is currently active. However, you can check which token is being used in your Microsoft Entra ID configuration:
check https://community.jamf.com/t5/jamf-pro/how-to-renew-scim-token-in-apple-business-manager/m-p/291373
Sign in with your administrator credentials.
In the left-hand navigation pane, select Microsoft Entra ID.
Under Manage, choose Enterprise applications.
Use the search bar to find and select your Apple Business Manager application.
In the application's left-hand menu, click on Provisioning.
Under the Admin Credentials section, you'll find fields for Tenant URL and Secret Token. Compare this token with the ones listed in Apple Business Manager.
If you're unsure which one is being used: Replace the existing Secret Token with the new token obtained from Apple Business Manager. Don’t delete Token 4 yet
Instead, update your provisioning settings in Azure to use Token 5 (the one expiring next year):

Copy Token 5 from Apple Business Manager.

In Azure > Apple Business Manager app > Provisioning, replace the existing secret token with Token 5.

Save and let Azure reverify the connection.

Once provisioning is successfully resumed and the connection remains “Connected”, you can safely delete Token 4.
https://learn.microsoft.com/en-us/entra/identity/app-provisioning/use-scim-to-provision-users-and-groups

I hope this clarifies things.
Anonymous

2025-04-23T16:37:09.7366667+00:00

Hello Dino Scott,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others.
Dino Scott 20 Reputation points

2025-04-23T18:19:38.07+00:00

I cannot see any secret token within the Entra admin centre. When I test the connection it works fine.

So I do not know where to actually change the token.

Screenshot 2025-04-23 at 19.17.17.png
Anonymous

2025-04-28T13:45:38.06+00:00

Hello Dino Scott,

Since you mentioned that the connection test works fine, check if the Provisioning Status is marked as "Success".

In the Provisioning section, you may see details for the SCIM configuration, but the Secret Token might not be directly visible. If the Secret Token is not visible, update the token in the Apple Business Manager by copying the new token (the one that expires next year).Now, go back to Provisioning in the Entra ID panel.

In the Provisioning section, try updating the existing token with the new token you copied from Apple Business Manager.

Even if you can't see a clear field to update the token, you can try replacing the token by configuring the provisioning settings again. After replacing the token, click Save.

Test the connection again to ensure the configuration is correct and provisioning is successful.

if you want to check which token you are using currently you can use Fiddler tracing logs to identify which SCIM token is being used it's a tool that capture traffic URL: https://www.telerik.com/download/fiddler

https://docs.telerik.com/fiddler/configure-fiddler/tasks/installfiddler
Dino Scott 20 Reputation points

2025-04-29T15:10:07.8366667+00:00

Hello. I do not see any option to add another token. All I can do is delete the existing ones.

Screenshot 2025-04-29 at 16.07.58.png
Dino Scott 20 Reputation points

2025-05-06T13:33:36.4133333+00:00

Hi Sakshi. Thank you so much for your help. That worked. I deleted Token 4 then created a token 6 and copied and pasted the details in Microsoft Entra. And it accepted. I then deleted the token 5. Thanks again for your help.
Anonymous

2025-05-06T14:50:45.8+00:00

Hello Dino Scott,

You're very welcome I'm glad to hear that it worked out smoothly! It sounds like you handled the token cleanup and reconfiguration in Microsoft Entra exactly right.

Please remember to "Accept Answer", so that others in the community facing similar issues can easily find the answers.

Accepted answer

0 additional answers

Your answer

Anonymous

2025-04-22T15:05:02.2166667+00:00

Hello Dino Scott,

Based on image apple Business Manager does not directly show which token is currently active. However, you can check which token is being used in your Microsoft Entra ID configuration:
check https://community.jamf.com/t5/jamf-pro/how-to-renew-scim-token-in-apple-business-manager/m-p/291373
Sign in with your administrator credentials.
In the left-hand navigation pane, select Microsoft Entra ID.
Under Manage, choose Enterprise applications.
Use the search bar to find and select your Apple Business Manager application.
In the application's left-hand menu, click on Provisioning.
Under the Admin Credentials section, you'll find fields for Tenant URL and Secret Token. Compare this token with the ones listed in Apple Business Manager.
If you're unsure which one is being used: Replace the existing Secret Token with the new token obtained from Apple Business Manager. Don’t delete Token 4 yet
Instead, update your provisioning settings in Azure to use Token 5 (the one expiring next year):

Copy Token 5 from Apple Business Manager.

In Azure > Apple Business Manager app > Provisioning, replace the existing secret token with Token 5.

Save and let Azure reverify the connection.

Once provisioning is successfully resumed and the connection remains “Connected”, you can safely delete Token 4.
https://learn.microsoft.com/en-us/entra/identity/app-provisioning/use-scim-to-provision-users-and-groups

I hope this clarifies things.
Anonymous

2025-04-23T16:37:09.7366667+00:00

Hello Dino Scott,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others.
Dino Scott 20 Reputation points

2025-04-23T18:19:38.07+00:00

I cannot see any secret token within the Entra admin centre. When I test the connection it works fine.

So I do not know where to actually change the token.

Screenshot 2025-04-23 at 19.17.17.png
Anonymous

2025-04-28T13:45:38.06+00:00

Hello Dino Scott,

Since you mentioned that the connection test works fine, check if the Provisioning Status is marked as "Success".

In the Provisioning section, you may see details for the SCIM configuration, but the Secret Token might not be directly visible. If the Secret Token is not visible, update the token in the Apple Business Manager by copying the new token (the one that expires next year).Now, go back to Provisioning in the Entra ID panel.

In the Provisioning section, try updating the existing token with the new token you copied from Apple Business Manager.

Even if you can't see a clear field to update the token, you can try replacing the token by configuring the provisioning settings again. After replacing the token, click Save.

Test the connection again to ensure the configuration is correct and provisioning is successful.

if you want to check which token you are using currently you can use Fiddler tracing logs to identify which SCIM token is being used it's a tool that capture traffic URL: https://www.telerik.com/download/fiddler

https://docs.telerik.com/fiddler/configure-fiddler/tasks/installfiddler
Dino Scott 20 Reputation points

2025-04-29T15:10:07.8366667+00:00

Hello. I do not see any option to add another token. All I can do is delete the existing ones.

Screenshot 2025-04-29 at 16.07.58.png
Dino Scott 20 Reputation points

2025-05-06T13:33:36.4133333+00:00

Hi Sakshi. Thank you so much for your help. That worked. I deleted Token 4 then created a token 6 and copied and pasted the details in Microsoft Entra. And it accepted. I then deleted the token 5. Thanks again for your help.
Anonymous

2025-05-06T14:50:45.8+00:00

Hello Dino Scott,

You're very welcome I'm glad to hear that it worked out smoothly! It sounds like you handled the token cleanup and reconfiguration in Microsoft Entra exactly right.

Please remember to "Accept Answer", so that others in the community facing similar issues can easily find the answers.

Answer 1

Hello Dino Scott

Now for current situation as we can't see current token it's better to add new client secret.

In Apple Business Manager, the "Client Secret" field being "greyed out" when creating a new SCIM token typically indicates you've already reached the maximum number of active tokens allowed which is two tokens at a time.From the screenshot:

Token 4 (expires 29/05/2025)

Token 5 (expires 31/03/2026)

You currently have two active SCIM tokens, so the system won’t allow generating a new one until at least one is deleted.

Delete an existing token

Once one is removed, the Client Secret field should become active.

You can then proceed to create a new SCIM token.

Renew SCIM token in Apple Business Manager:

1.Sign in to business.apple.com > User (bottom left corner) > Preferences
2.Under Managed Apple Account > Directory Sync > Edit (on right)
Note: Tenant URL = https://federation.apple.com/feeds/business/scim
Note: Token X expires on DATE

3.Under Client Secret Click +Client Secret and copy the new Client Secret

4.Go to https://entra.microsoft.com
5.In Entra Admin Center go to Applications > Enterprise Applications > Apple Business Manager

6.Select Provisioning from under Manage in the middle pane

7.On right bottom Manage Provisioning > Update Credentials

8.Select dropdown arrow under Admin Credentials

9.Paste in your Secret Token from step 3 above - old appears as • new will appear as ••••••••••••••••••••••• etc

10.CLICK SAVE then test your connection

Please remember to "Accept Answer", so that others in the community facing similar issues can easily find the answers.

Ali Graham 0 Reputation points

2025-07-04T09:54:36.5333333+00:00

This is the correct answer for me (July 2025)

Share via

SCIM token apple business manager

0 additional answers

Your answer