Sign in to the Microsoft Entra admin center as at least an Application Administrator.

Browse to Identity > Applications > Enterprise applications.

A list of all configured apps is shown including apps added from the gallery.

Select + 'New application' > + 'Create your own application'.

Enter a name for your application such as 'SCIM Demo App'. Next, choose the 'integrate any other application you don't find in the gallery' option and select Add to create an app object. The new app is added to the list of enterprise applications and opens to its app management screen.

The following screenshot shows the Microsoft Entra application gallery:

In the app management screen, select Provisioning in the left panel.

Select + New configuration.

In the Tenant URL field, enter the URL (of the application's SCIM endpoint).
Example: https://scimqa.asite.com/scim/tenants/{tenant name}
​https://scimqa.asite.com/scim
You must enter your company name matching your registered organization name on Asite while creating users or user groups in Microsoft Entra. Secondly, you can directly use the name of your tenant organization in the 'Tenant URL' field by creating an encoded URL (You can also use a URL encoder service such as https://www.urlencoder.org/ if required) containing the organization name.
Note: If you use both options in your Microsoft Entra, your organization name will be taken from the 'Tenant URL' and not the organization name you pass while creating users or user groups.

If the SCIM endpoint requires an OAuth bearer token from an issuer other than Microsoft Entra ID, then copy the OAuth bearer token into the optional Secret Token field as applicable. Please speak with your Asite point of contact for the OAuth token as required. We'll need your login credentials to help us generate an OAuth token for you. Once the Asite app is published in Microsoft Entra's gallery, it will no longer be required.

Select Test Connection to have Microsoft Entra ID attempt to connect to the SCIM endpoint. If your attempt fails, an error message is displayed.
​Note:: Test Connection queries the SCIM endpoint for a user that doesn't exist, using a random GUID as the matching property selected in the Microsoft Entra configuration. The expected correct response is HTTP 200 OK with an empty SCIM ListResponse message.

If the attempt to connect to the application succeeds, select Save to apply the changes.

Select the 'Sync all users and groups' tab and assign the users or groups you want to sync.

In the 'Attribute mapping' section, you can review the user attributes synchronized from Microsoft Entra ID to Asite.
​Attribute | Type
​userName | String
active | Boolean
title | String
preferredLanguage | String
name.givenName | String
name.familyName | String
phoneNumbers[type eq "work"].value | String
urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:organization | String
The attributes selected as Matching properties can be used to match the user accounts in Asite for update operations. Select the Save button to commit any changes.

Under the Mappings section, select Synchronize Microsoft Entra ID Groups to Asite.

In the 'Attribute mapping' section, you can review the group attributes synchronized from Microsoft Entra ID to Asite.

Attribute | Type
​displayName | String
externalId | String
members | Reference
The attributes selected as Matching properties can be used to match the user groups in Asite for update operations. Select the Save button to commit any changes.

To use the 'Provision on-demand' option, you must first add that user or group in the Microsoft Entra app under the 'Users and groups' of the required SCIM app under your created application.
Once you have added the required users or user groups, you can select 'Provision on-demand' in the left panel. You can search for a user in the scope for provisioning and provision them on-demand. Repeat with other users that you would like to test provisioning with.

Once your configuration is complete, select Overview in the left panel.

Select Properties.

Select the pencil to edit the properties. Enable notification emails and provide an email to receive quarantine emails. Enable accidental deletion prevention. Click Apply to save the changes.

Select Start provisioning to start the Microsoft Entra provisioning service.