How to configure SCIM for Mircosoft Entra : Whale Knowledge Base

Plans
✗ Forever Free
✗ Essentials *(retired)
✗ Scale
ⱱ Enterprise

User roles	✗ Reader	✗ Writer	ⱱ Admin

Why?

If you want to optimize and automate your user management within your Whale workspace, you can use our SCIM integration.

Underneath we'll show you how you can connect Micorosft Entra (formerly known as Microsoft Azure AD) to Whale. Anytime a new user is added to your Microsoft workspace they will also be added to Whale. If you delete someone from Entra, they will also be deleted from Whale.

How?

Action	Description
Visit	https://entra.microsoft.com/#home
Click "Applications"
Click "Enterprise applications"
Click "New application"
Click "Create your own application"
Fill in the name of your app. Select the 3rd option 'Integrate any other...' Click "Create"
Click "Provisioning"
Click "Provisioning"
Click "Tenant URL" input field Get the tenant URL from your workspace integration settings. For Microsoft Scim to work properly you need to add '?aadOptscim062020' to the end of the URL. i.e.: url.be/us --> url.be/us?aadOptscim062020 For more info about the flag see: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/application-provisioning-config-problem-scim-compatibility#flags-to-alter-the-scim-behavior
Click "Token" input field Get the token from your workspace integration settings.
Click "Test Connection"
Click "Save"
Click "Mappings"
Click "Provision Azure Active Directory Users"
Click "Switch([IsSoftDeleted], , "False", "True", "True", "False")"
Click "Expression" text area
Replace the text with 'Not([IsSoftDeleted])'
Click "Ok"
Click "Delete" for all the properties that cannot be matched with Whale. Only the attributes 'userName', 'active', 'name.givenName', 'name.familyName' and 'externalId' are required.
After the changes the attribute mappings should look like this
Click "mailNickname" to remap the attribute with the field 'objectId'
Click "Ok"
Click "Save"
Click "Yes"
Click 'Overview'
Click "Start provisioning" Note that depending on your settings some time before updates are pushed to Whale.