Skip to main content

Configuring Microsoft Entra ID attribute mappings for SCIM provisioning

You must be logged in to Microsoft Entra using one of the following roles: Application Administrator, Cloud Application Administrator, or Global Administrator.

  1. Sign in to the Microsoft Entra Admin Center.

  2. Navigate to Entra ID > Enterprise apps.

  3. Open the Hyperproof SCIM application you created. See Adding a Microsoft Entra non-gallery application for SCIM.

  4. From the left menu, select Provisioning > Edit provisioning.

  5. Expand the Mappings section.

  6. Click Provision Microsoft Entra ID Users.

  7. Make sure the following required mappings are configured:

    Microsoft Entra ID attribute

    Hyperproof attribute

    Matching precedence

    Notes

    userPrincipalName

    userName

    1

    Primary identifier

    mail

    emails[type eq "work"].value

    User's email address

    Switch([IsSoftDeleted])

    active

    User status (active/inactive)

    givenName

    name.givenName

    First name (required)

    surname

    name.familyName

    Last name (required)

  8. Add the following optional mappings:

    These mappings are recommended for richer user data.

    Microsoft Entra ID attribute

    Hyperproof attribute

    jobTitle

    title

    preferredLanguage

    locale

  9. Remove the following unnecessary mappings. Hyperproof doesn't use them:

    name.formatted

    addresses[type eq "work"].* (all address fields)

    phoneNumbers[type eq "work"].value

    phoneNumbers[type eq "mobile"].value

    phoneNumbers[type eq "fax"].value

    timezone

    externalId

    displayName displayName

    urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeId

    urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department

    urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager

  10. Optionally, configure group mappings as follows:

    1. Return to the Mappings section.

    2. Click Provision Microsoft Entra ID Groups

    3. Keep these mappings:

      displayName → displayName

      members → members

    4. Delete any other default mappings.

  11. Click Save.

For information on the entire workflow for configuring SCIM provisioning, see Microsoft Entra ID SCIM Configuration.

In this section: