> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure SCIM

> Learn how to configure SCIM provisioning with Azure for Infisical.

> [!NOTE]
>
> Azure SCIM provisioning is a paid feature.
>
> If you're using Infisical Cloud, then it's available under the **Enterprise Tier**. If you're self-hosting Infisical,
> then you should contact [sales@infisical.com](mailto:sales@infisical.com) to purchase an enterprise license to use it.

Prerequisites:

* [Configure Azure SAML for Infisical](https://infisical.com/docs/documentation/platform/sso/azure.md)

**1. Create a SCIM token in Infisical**

In Infisical, head to **SSO & Provisioning** and select the **Provisioning** tab. Under **SCIM Provisioning**,
turn on the **Enable SCIM** toggle to allow Azure to provision and deprovision users for your organization.

![SCIM enable provisioning](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/scim-enable-provisioning.png)

Next, select **Configure** on the SCIM Provisioning card, then select **Create Token** in the **Manage SCIM Credentials** modal to generate a SCIM token for Azure.

![SCIM create token](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/scim-create-token.png)

Next, copy the **SCIM URL** and **New SCIM Token** to use when configuring SCIM in Azure.

![SCIM copy token](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/scim-copy-token.png)

**2. Add Users and Groups in Azure**

In Azure, navigate to Enterprise Application > Users and Groups. Add any users and/or groups to your application that you would like
to be provisioned over to Infisical.

![SCIM Azure Users and Groups](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/azure/scim-azure-add-users-and-groups.png)

**3. Configure SCIM in Azure**

In Azure, head to your Enterprise Application > Provisioning > Overview and press **Get started**.

![SCIM Azure](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/azure/scim-azure-get-started.png)

Next, set the following fields:

* Provisioning Mode: Select **Automatic**.
* Tenant URL: Input the SCIM URL from Step 1 with `?aadOptscim062020` appended as a query parameter.
* Secret Token: Input the **New SCIM Token** from Step 1.

Afterwards, select **Enable SCIM**, then select **Test Connection** to check that SCIM is configured properly.

![SCIM Azure](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/azure/scim-azure-config.png)

After you hit **Save**, select **Provision Microsoft Entra ID Users** under the **Mappings** subsection.

![SCIM Azure](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/azure/scim-azure-select-user-mappings.png)

Next, adjust the mappings so you have them configured as below:

![SCIM Azure](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/azure/scim-azure-user-mappings.png)

Finally, head to your Enterprise Application > Provisioning and set the **Provisioning Status** to **On**.

![SCIM Azure](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/azure/scim-azure-provisioning-status.png)

Alternatively, you can go to **Overview** and press **Start provisioning** to have Azure start provisioning/deprovisioning users to Infisical.

![SCIM Azure](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/scim/azure/scim-azure-start-provisioning.png)

Now Azure can provision/deprovision users to/from your organization in Infisical.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.