Configure SCIM provisioning in Entra

DigiCert​​®​​ account で、［アカウント］アイコンから［Sign-in methods］を選択します。

In the User lifecycle section, select Automated user provisioning with SCIM.

In the Enable users and group sync section, switch to enable SCIM provisioning.

Under SCIM base URL, select Copy.

Select Generate token.

1. Select how long the token should remain valid.

2. Select Generate token.

3. Under Token, select Copy.

4. Select Done.

Sign in to the Microsoft Entra admin center.

In the left pane, select Microsoft Entra ID.

In the left pane of Microsoft Entra ID, select Manage > Enterprise apps.

Select + New application.

Select Create your own application.

In the What's the name of your app? field, enter an app name that specifies SCIM. Example: Example, Inc (SCIM)

Select Create.

In the left pane of the SCIM app you created, select the Provisioning tab.

Select + New configuration.

In the Select authentication method field, select Bearer authentication.

Finish the following fields:

1. Tenant URL

   Enter the SCIM base URL copied from DigiCert® account in Step 1.4.

2. Secret token

   Enter the token generated in DigiCert® account in Step 1.5.c.

Select Test connection.

Expected message: Connection test for 'app name' was successful.

Select Create.

In the left pane of the SCIM app you created, select the Users and groups tab.

Select +Add user/group.

Select the Users and groups tab.

Select checkbox next to the groups you want to provision.

Select Select.

Verify that you’ve selected the correct groups.

Select Assign.

In the left pane of the SCIM app you created, select Overview (Preview).

Select Start provisioning.

In the confirmation pop-up, select Yes.

DigiCert​​®​​ account で、［アクセス］アイコンを選択します。

Select Users to view a consolidated list of all your users, this includes manually created users and users provisioned through SCIM.

Select Groups to view a consolidated list of groups:

1. The Managed by column displays DigiCert for default DigiCert groups.

2. The Managed by column displays Identity provider for groups provided by your IdP.

In DigiCert​​®​​ account, select Access (users icon).

Select Groups to assign user roles:

Select the name of a SCIM group.

The Managed by column shows Identity provider for groups provided by your IdP.

Select Group access.

Select Update group access.

In the Services field, select the checkbox next to all the DigiCert Service this user group should have access to.

In the User roles section of each service, select the check box of the user roles that this user group should have.

Select Assign access.