question

maksymhysko-0319 avatar image
0 Votes"
maksymhysko-0319 asked maksymhysko-0319 commented

Can't configure provisioning.

I want to configure the provisioning in an application with SSO configured. But, the button Get started is not active.

82470-screenshot-2021-03-29-at-205840.png

Are there any restrictions?

P.S. I can configure the provisioning in another application without SSO configured, but I need to configure SSO and provisioning for one application.


azure-ad-user-provisioning
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

does anyone know the answer?

0 Votes 0 ·

@maksymhysko-0319
Thank you for your post and I apologize for the delayed response!

From the Portal message within your app's provisioning blade, are you able to make sure that the app you selected supports the SCIM standard for provisioning and request support for the application as described here.

I also see a similar message under one of my service principles, but was able to select the "Get started" button within one of my enterprise apps.
83441-image.png


If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

0 Votes 0 ·
image.png (75.2 KiB)

@JamesTran-MSFT
Sorry, skipped your response. Thank you for your feedback.

I have read these docs. I implemented an application with SCIM API and want to configure this app to test and then publish it to the gallery.
To test the Provisioning I can create an application via Enterprise applications the menu by selecting Integrate any other application you don't find in the gallery (Non-gallery). But I can't configure this app to use SSO(OpenId) - I need to test my app with two options(SSO:OpenId + provisioning). To test SSO I can create another app via App registrations and can't configure Provisioning.
Is there way to configure one app to use SSO:OpenId + Provisioning? What should I do to publish my app to the gallery and tell everyone that my app support SSO:OpenId and Provisioing?

I hope I have explained my question in an accessible way.

0 Votes 0 ·

@maksymhysko-0319
Thank you for the detailed response!

I've reached out to our engineering team to see if one app can support SSO (OpenID) and provisioning, I'll update as soon as I get a response.


If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

0 Votes 0 ·

1 Answer

JamesTran-MSFT avatar image
0 Votes"
JamesTran-MSFT answered maksymhysko-0319 commented

@maksymhysko-0319
Thank you for your time and patience throughout this issue!

Update:
Automatic provisioning is not available on my OIDC based application:

  • If you create an app registration, the corresponding service principal in enterprise apps will not be enabled for automatic user provisioning. You will need to either request the app be added to the gallery, if intended for use by multiple organizations, or create a second non-gallery app for provisioning.

  • If you don't plan on adding the app to the gallery, you should be able to implement a workaround by following this doc - Integrate your SCIM endpoint with the AAD SCIM client


If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@JamesTran-MSFT

Thank you for the answer. I will add the app to the gallery.

0 Votes 0 ·