SCIM Provisioning Setup for Microsoft Entra ID

Step 1: Initiate Setup in Symbol Security

1. Log in to the Symbol Security App and navigate to Company Portal > Settings > General > SCIM Provisioning.

2. Click Setup SCIM, select Microsoft, enter your Tenant ID, and click:

   • Generate Token (if setting up sync for the first time), OR
   • Switch to SCIM (if migrating from Entra ID User Sync).

3. Copy the generated SCIM Endpoint URL (Tenant URL) and Secret Token (Bearer Token).

ℹ️ Note: Switching to SCIM stops legacy Entra ID sync. Existing users, groups, and Microsoft SIDs remain connected.

Step 2: Create a SCIM Enterprise Application in Entra ID

1. Log in to the Microsoft Entra Admin Center as an Administrator.
2. Navigate to Identity > Applications > Enterprise applications.
3. Click + New Application, then select + Create your own application.
4. Enter Symbol Security SCIM Provisioning in the application name field.
5. Select Integrate any other application you don’t find in the gallery (Non-gallery).
6. Click Create.

Step 3: Configure Admin Credentials and API Connection

1. In your newly created Enterprise Application menu, select Provisioning from the sidebar.

2. Click Get started or Edit provisioning.

3. Set Provisioning Mode to Automatic.

4. Expand Admin Credentials:

   • Tenant URL: Paste the SCIM Endpoint URL copied from Symbol Security.
   • Secret Token: Paste the Secret Token / Bearer Token generated in Symbol Security.

5. Click Test Connection.

6. Once Entra ID successfully verifies the connection, click Save at the top.

Step 4: Attribute Mapping Verification

1. Expand the Mappings section under Provisioning and select Provision Microsoft Entra ID Users.
2. Verify that mandatory attributes are properly mapped to SCIM target fields:

⚠️ Warning: Symbol Security mandatorily requires firstName, lastName, email, and title. Missing mandatory fields will cause user provisioning to fail.

Step 5: Assign Users/Groups and Enable Provisioning

1. Go to Users and groups from the application sidebar.
2. Click + Add user/group to assign the users or groups you wish to provision to Symbol Security.
3. Return to the Provisioning overview page.
4. Set Provisioning Status toggle to On.
5. Click Save to start automatic SCIM synchronization.

Microsoft Entra ID AttributeSCIM Target AttributegivenNamename.givenName (firstName)surnamename.familyName (lastName)userPrincipalName / mailemails[type eq "work"].value (email)jobTitletitle (title)