Enable User provisioning for an existing Enterprise Application

Question

Hi, We have an internal app that uses Azure AD for Authentication but stores detailed Authorization information for users in its database. When we created the app, we picked the second option "Register an application to integrate with Azure AD (App you're developing)" and as the requirements evolved we built an SCIM endpoint for automatic user provisioning. However, because of the option we chose during creation, we are not able to turn on Automatic user provisioning in Azure AD. An alternative is to create another app just for SCIM/User provisioning, which is not ideal. We could also delete and recreate the App with the correct option that that requires a whole lot of configuration and updates that requires downtime on our apps, which we want to avoid.

So my question is, is there a way to enable Automatic User provisioning on an existing Application?

Note: Publishing the app to Gallery is not an option for us as it's an internal app used only by our Staff: https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-howto-app-gallery-listing

Thanks.

Answer 1

Unfortunately, no - you've identified the options available. You'll need to create another app using the custom non-gallery option and either just do provisioning on that app or migrate the other config over.

Answer 2

Hi @PB ,

If you go to Enterprise Applications > Select the application > Provisioning, you should be able to select "Automatic" for the application.

https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/configure-automatic-user-provisioning-portal

Let me know if that is not showing up for you.