SCIM Configuration

Setup SCIM with Microsoft Entra ID (Azure AD)

Automate user provisioning and deprovisioning between Entra ID and Zenzap.

In your enterprise app, click Provision User Accounts
Use the url https://prod-api.zenzap.co/auth/scim/microsoft and the key provided by your CS representative.
Test Connection and verify the connection is successful.
Map the user attributes to the correct fields in Zenzap:

customappsso Attribute	Microsoft Entra ID Attribute	Match objects using this attribute (edit button)	Apply this mapping (edit button)
userName	userPrincipalName	Yes	Always
active	Switch([IsSoftDeleted], , “False”, “True”, “True”, “False”)	No	Always
displayName	displayName	No	Only during object creation
phoneNumbers[type eq “mobile”].value	mobile	No	Only during object creation

Automate user provisioning and deprovisioning between Okta and Zenzap.

In your Okta app, go to the General tab and set Provisioning to “SCIM”.
Go to the Provisioning tab → Integration, and click Edit.
Configure the SCIM Connection:
- SCIM connector base URL: https://prod-api.zenzap.co/auth/scim
- Unique identifier field for users: email
- Supported provisioning actions: Push New Users, Push Profile Updates, Push Groups
- Authentication Mode: HTTP Header
- Authorization: Bearer token provided by Zenzap support
Click Test Connector Configuration to verify the connection is successful.
Go to To App settings and enable:
- Create Users
- Update User Attributes
- Deactivate Users
Go to the Assignments tab and assign users or groups to the app to start provisioning.