Setup Guide: Azure AD Auto-Provisioning | Communifire Documentation

Follow these instructions to configure auto-provisioning after setting up Azure Active Directory (AD), or Entra ID. This setup allows for the automated creation, update, and deletion of user accounts in your intranet platform.

Preparation

The following process will take 1-2 hours to complete. Before you start, ensure you have administrative access to your Azure portal and Axero and have completed steps 1-3 of the Azure AD SSO Setup Guide.

Step 1: Set Up Auto-Provisioning in Azure AD

1. Log into the Azure portal as an administrator.

2. Navigate to Enterprise applications and select your SSO application.

3. Click Provisioning in the application menu.
   

4. Select Get started to initiate the setup.
   

5. Change the Provisioning Mode to Automatic to enable automatic user provisioning.
   

6. Click to expand the Admin Credentials section.
   

7. In the Tenant URL field, enter your intranet's URL followed by /api/scim/v2. Examples include https://mycompany.communifire.com/api/scim/v2 and https://mycompany.com/api/scim/v2.
   

Step 2: Configure SCIM Integration Between Azure AD and Axero

1. Open a new browser tab and log into your Axero site.

2. Go to Control Panel > System > Single Sign-On.

3. Click to show the SCIM User Provisioning area and copy the Bearer token.
   

4. Switch back to Azure and paste the token into the Secret Token field.
   

5. Click Test Connection to ensure the settings are correct.
   

6. After confirming the successful connection, click Save and close the page.
   

Step 3: Adjust Attribute Mappings

1. Return to the Provisioning page and click Edit attribute mappings.
   

2. Open the Mappings section and click Provision Microsoft Entra ID Groups.
   

3. Select No for Enabled, and confirm by clicking Save.
   

4. Click Yes to acknowledge, then close the page.
   

5. Click Provision Microsoft Entra ID Users.
   

6. Edit the externalId to mailNickname mapping.
   

7. Change the Source attribute to objectId.
   

8. Click Ok to confirm.

Step 4: Add Custom Attributes (Optional)

Below is a list of the default SCIM attributes in Azure.

You can add custom attributes to import additional user data:

1. After clicking Provision Microsoft Entra ID Users in the previous step, select Show advanced options.
   

2. Click Edit attribute list for customappsso.
   

3. At the bottom of the attribute list, enter new attributes.
   

4. Click Save. Click Yes to confirm.

5. Click Add New Mapping to map each custom attribute:

   • Mapping type: Select Direct.

   • Source attribute: Select the Azure AD attribute.

   • Target attribute: Select the outgoing attribute.

   • Match objects using this attribute: Select No.

   • Apply this mapping: Select Always.

   • Click Ok to save the mapping.
     

6. Once all mappings have been added, click Save and Yes to confirm.

7. Return to Axero and go to Control Panel > System > Single Sign-On.

8. Click the Data Mapping tab and select SCIM.

9. Ensure the property names are identical to the attribute names in Azure and are mapped to the correct user profile fields. When you are done, click Update.

10. Click System > Advanced System Utilities.

11. Click Restart Site.

Step 5: Begin the Provisioning Process

1. Return to the Provisioning section.

2. Click Start provisioning.
   

Completing these steps ensures the successful implementation of auto-provisioning, enhancing the efficiency of user account management within your infrastructure.