17.2 Configuring Azure AD for the SCIM streaming service

To configure Azure AD:

1. Create a new application.

   1. Log in to Azure Portal with your Azure AD admin credentials.

   2. Select Microsoft Entra ID.

   3. From the left panel, select Manage and expand it.

   4. Select Create your own application.

   5. Specify a name for the application and choose to integrate any other application you do not find in the gallery.

   6. Select Create.

2. Enable SCIM provisioning.

   1. On the All Applications page, select the application name.

   2. On the Properties page, from the left panel, select Manage and expand it.

   3. Select Provisioning.

   4. On the Overview page, from the left panel, select Manage > Provisioning.

   5. In the Admin Credentials section, type the SCIM Endpoint URL of the OpenText Identity Governance server and the unique identifier. Use the following format:

      https://igurl/api/scim/UNIQUE_IDENTITY_SOURCE_ID

   6. Generate the bearer token using a script or a tool such as Insomnia, then enter the token in the Secret Token field.

   7. Test the connection to ensure that it is successful.

3. Configure attribute mapping to map user attributes between Azure AD and OpenText Identity Governance.

   1. (Optional) In the Mappings section, click the provision link for users and groups to edit the default mappings.

      Azure AD provides predefined mappings for common attributes such as userPrincipalName, email, firstName, or lastName.

   2. (Optional) Click Add New Attribute.

4. Provision users on demand.

   1. Select Provision on demand for manual provisioning.

   2. Search for an existing user or group and select the user.

   3. Click Provision.