> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zenzap.co/llms.txt
> Use this file to discover all available pages before exploring further.

# SCIM Configuration

> How to setup SCIM user provisioning with your identity provider

<Tabs>
  <Tab title="Microsoft Entra ID">
    ## Setup SCIM with Microsoft Entra ID (Azure AD)

    Automate user provisioning and deprovisioning between Entra ID and Zenzap.

    1. In your enterprise app, click Provision User Accounts

    2. Use the url `https://prod-api.zenzap.co/auth/scim` and the key provided by your CS representative.
           <img src="https://mintcdn.com/zenzap/r8Y4VlP7S5tJQ2KC/images/scim_microsoft_connectivity.png?fit=max&auto=format&n=r8Y4VlP7S5tJQ2KC&q=85&s=c944b5fd553bb72ccc8a59bf3fdfc5e9" alt="SCIM configuration" width="2352" height="1064" data-path="images/scim_microsoft_connectivity.png" />

    3. Test Connection and verify the connection is successful.
           <img src="https://mintcdn.com/zenzap/r8Y4VlP7S5tJQ2KC/images/scim_microsoft_test_connection.png?fit=max&auto=format&n=r8Y4VlP7S5tJQ2KC&q=85&s=54c7c87c8557c68131bb64586e8a090d" alt="SCIM Test Connectivity" width="392" height="231" data-path="images/scim_microsoft_test_connection.png" />

    4. Map the user attributes to the correct fields in Zenzap:

    | customappsso Attribute                | Microsoft Entra ID Attribute                                 | Match objects using this attribute (edit button) | Apply this mapping (edit button) |
    | ------------------------------------- | ------------------------------------------------------------ | :----------------------------------------------: | :------------------------------: |
    | userName                              | userPrincipalName                                            |                        Yes                       |              Always              |
    | active                                | Switch(\[IsSoftDeleted], , "False", "True", "True", "False") |                        No                        |              Always              |
    | displayName                           | displayName                                                  |                        No                        |    Only during object creation   |
    | phoneNumbers\[type eq "mobile"].value | mobile                                                       |                        No                        |    Only during object creation   |

    <img src="https://mintcdn.com/zenzap/r8Y4VlP7S5tJQ2KC/images/scim_microsoft_attribute_mapping.png?fit=max&auto=format&n=r8Y4VlP7S5tJQ2KC&q=85&s=b81dc0b707374a22bd2778d664334ef8" alt="SCIM Map Users" width="1802" height="1606" data-path="images/scim_microsoft_attribute_mapping.png" />

    5. Set *"Sync only assigned users and groups"* and click Save

           <img src="https://mintcdn.com/zenzap/r8Y4VlP7S5tJQ2KC/images/scim_microsoft_provision_only_selected_users.png?fit=max&auto=format&n=r8Y4VlP7S5tJQ2KC&q=85&s=73761c441d173a609fc3fc4316c8e18f" alt="SCIM Sync" width="2050" height="1348" data-path="images/scim_microsoft_provision_only_selected_users.png" />

    6. Press start provisioning. This process typically takes up to 40 minutes.

    7. Check the provision overview for any errors.

           <img src="https://mintcdn.com/zenzap/r8Y4VlP7S5tJQ2KC/images/scim_microsoft_provisioning_status.png?fit=max&auto=format&n=r8Y4VlP7S5tJQ2KC&q=85&s=fd67297dd3b7fbae18539934b2075eb3" alt="SCIM Provision Overview" width="2518" height="944" data-path="images/scim_microsoft_provisioning_status.png" />

    8. Users will appear in the Zenzap admin screen under the Organization section.

           <img src="https://mintcdn.com/zenzap/r8Y4VlP7S5tJQ2KC/images/scim_microsoft_zenzap_users_status.png?fit=max&auto=format&n=r8Y4VlP7S5tJQ2KC&q=85&s=f63586f979daf99c848c460844b8d8af" alt="Zenzap SCIM Status" width="1166" height="1910" data-path="images/scim_microsoft_zenzap_users_status.png" />
  </Tab>

  <Tab title="Okta">
    ## Setup SCIM with Okta

    Automate user provisioning and deprovisioning between Okta and Zenzap.

    1. In your Okta app, go to the **General** tab and set Provisioning to "SCIM".
           <img src="https://mintcdn.com/zenzap/vyQ0b07yEIpFeDtl/images/scim_okta_enable_scim.png?fit=max&auto=format&n=vyQ0b07yEIpFeDtl&q=85&s=9cd5c2d6d8bb7e212ab21bcd30586842" alt="Enable SCIM" width="1071" height="562" data-path="images/scim_okta_enable_scim.png" />

    2. Go to the **Provisioning** tab → **Integration**, and click **Edit**.

    3. Configure the SCIM Connection:
       * **SCIM connector base URL**: `https://prod-api.zenzap.co/auth/scim`
       * **Unique identifier field for users**: `email`
       * **Supported provisioning actions**: Push New Users, Push Profile Updates, Push Groups
       * **Authentication Mode**: HTTP Header
       * **Authorization**: Bearer token provided by Zenzap support
             <img src="https://mintcdn.com/zenzap/vyQ0b07yEIpFeDtl/images/scim_okta_connection_settings.png?fit=max&auto=format&n=vyQ0b07yEIpFeDtl&q=85&s=14cd83b7d36149a7782fc72d359943f4" alt="SCIM Connection Settings" width="1078" height="824" data-path="images/scim_okta_connection_settings.png" />

    4. Click **Test Connector Configuration** to verify the connection is successful.
           <img src="https://mintcdn.com/zenzap/vyQ0b07yEIpFeDtl/images/scim_okta_test_success.png?fit=max&auto=format&n=vyQ0b07yEIpFeDtl&q=85&s=54c86823c7a25d1d8738e552ae596312" alt="Test Success" width="717" height="720" data-path="images/scim_okta_test_success.png" />

    5. Go to **To App** settings and enable:
       * Create Users
       * Update User Attributes
       * Deactivate Users
             <img src="https://mintcdn.com/zenzap/vyQ0b07yEIpFeDtl/images/scim_okta_provisioning_options.png?fit=max&auto=format&n=vyQ0b07yEIpFeDtl&q=85&s=253808a3c9c124dfbb813ce346d9c6d2" alt="Provisioning Options" width="1195" height="849" data-path="images/scim_okta_provisioning_options.png" />

    6. Go to the **Assignments** tab and assign users or groups to the app to start provisioning.
  </Tab>
</Tabs>