Creating an Azure enterprise application is the 1st step to integrate the SuperOffice SCIM endpoint with the Azure AD provisioning service.
Pre-requisites:
For testing, you can do a 30-day free trial of AAD Premium. If you obtain a new license to AAD, you might need to sign out and back in to activate the license.
Sign in and add the application
-
In a browser, sign in to the AAD portal.
-
From the left pane, select Enterprise applications.
-
Add your own non-gallery application:
-
Click + New application.
-
Select All.
-
Click the Non-gallery application tile.
-
Enter a name and click Add.
For updated info from Microsoft, see their guide to build a SCIM endpoint and configure provisioning.
Turn on automatic provisioning from AAD
-
Go to the app management screen and select Provisioning from the left pane.
-
Set Provisioning mode to Automatic.

Configure admin credentials
-
Expand the Admin Credentials settings block.
-
Get the SCIM config from the SuperOffice Identity Manager.
-
Copy the URL into the Tenant URL field.
-
Copy the Token into the Secret Token field.
-
Click Test Connection and verify the connection between AAD and the SuperOffice SCIM endpoint.
-
Click Save.

Configure mapping
The Azure portal allows mapping to the id
attribute. However, this is not supported by SCIM and should not be used.
-
Expand the Mappings settings block.
-
Customize the attribute mapping of externalId
for user objects:
-
Select the user attribute set.
-
Change the default mapping of externalId
from mailNickName
to objectId
.
-
Enable the Match objects using this attribute option.
-
Set Matching precedence to 2
.
-
Click OK.

-
Change the attribute mapping for group objects to match on objectId
rather than displayName
:
-
Select the group attribute set.
-
Select the displayName
attribute, change Matching precedence value to 2
, and click OK.
-
Select the objectId
attribute, enable the Match objects using this attribute option, set Matching precedence value to 1
, and click OK.

-
Click Save.
Start 1st synchronization and verify the result
-
Scroll down to Settings.
-
Select scope - do you want to sync all or only assigned users and groups?
-
Set Provisioning status to On
.
-
Click Save to start the synchronization.
-
Wait for the incremental cycle to complete.
-
You can now preview the users in the SuperOffice Identity Manager.

Next steps: