Share via

Scim provisioning - including user's profile pictore and id's of groups

Marcin Zdanowicz 1 Reputation point
2022-04-11T17:40:26.333+00:00

Hello, I'm currently investigating a case of provisioning Azure AD users through self-made SCIM app and I'm trying to access user's photo and id's of groups that they're members.
Is it possible to achieve it via SCIM or extra request through Graph are necessary?

Thanks in advance!

Azure
Azure
A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.
1,033 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,951 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Danny Zollner 9,531 Reputation points Microsoft Employee
    2022-04-12T17:27:53.927+00:00

    For photos, the SCIM spec has some gaps that don't allow for secure standardized implementations. This is something that Microsoft hopes to improve in the SCIM standard within the next year or two. For now, MS Graph calls are required.

    For groups, the "groups" attribute on the SCIM user resource is readOnly. If your SCIM server has/can add support for the SCIM group resource type, group memberships can be managed via that. Azure AD's SCIM client will not send group memberships as a property on a user resource, however, as the spec doesn't support this.

    1 person found this answer helpful.