Skip to main content
This page outlines how to configure SCIM user and group provisioning between Microsoft Entra and the Airia platform, including initial SSO setup with Just-In-Time (JIT) provisioning. The instructions are intended to be followed by IT administrators or technical staff setting up SSO and provisioning for their organization.  

​
Enabling Automated User and Group Provisioning (SCIM)

Automate the provisioning and de-provisioning of users and groups from your identity provider to Airia.

​
Create a Provisioning Application

  1. In your identity provider, create a new Enterprise Application for Airia User Provisioning (Non-gallery)
  2. Navigate to Provisioning and select ‘Connect Your Application’.
  3. Insert the Airia SCIM credentials into your application
    1. To obtain this, navigate to the Airia Platform > Settings > SSO & Provisioning. Scroll to SCIM 2.0 and toggle on and generate a key.
  4. Test the connection before selecting create.

​
Configuring Group Attributes in Entra

  1. In Entra, navigate to Attribute mapping to create a Provision Microsoft Entra ID Group.
  2. Edit the group displayName and update the following attributes:
    1. Mapping Type: Expression
    2. Expression:  Append([displayName],”-{Insertdomain}”) – insert your domain.
  3. Click Ok to confirm the changes, then save the Attribute mapping on the next screen.
  4. Select Show advanced options at the bottom of the screen and select Edit attribute list for customappsso.
  5. Add a group attribute
    1. Name: identityGroupName
    2. Type: String
  6. Save the new attribute.
  7. Add a new mapping:
    1. Source attribute: displayName
    2. Target attribute: identityGroupName (a page refresh may be required to see this option)
  8. Click OK to confirm the change, then save the Attribute mapping.

​
Configuring Users Attributes in Entra

  1. Navigate to for Provision Microsoft Entra ID Users and select Show advanced options at the bottom of the page.
  2. Edit attribute for customappsso
  3. Add a new attribute to this list then save.
    1. Name: enterprise
    2. Type: String
  4. Select Add new mapping
    1. Mapping type: Constant
    2. Constant Value: {Airia Tenant Name} – (In Airia, click your profile to see the Workspace name)
    3. Target attribute: enterprise
    4. Match objects using this attribute: Yes
    5. Matching Precedence: 2
  5. Select OK and save the Attribute Mapping

​
Assigning the Entra App to the Users 

Make sure the appropriate user groups are assigned to the Enterprise Application in Entra. After the first sync, you’ll be able to assign Airia roles to the synced Entra Groups.

​
SSO Troubleshooting:

If you have any challenges regarding your configuration, please reach out to your Support contact or by emailing [email protected] with the issue you are experiencing and we will endeavour to support you.