# Azure AD SCIM Client

Learn how to configure Azure AD/Microsoft Entra ID as a SCIM client.

> For the index of this section of the site, see [llms.txt](https://fusionauth.io/docs/llms.txt)

This is a basic example to get started configuring Azure AD/Microsoft Entra ID as a SCIM client and establish a connection between FusionAuth and Azure AD for provisioning purposes.

For complete documentation, please refer to the [Azure AD/Microsoft Entra ID provisioning documentation](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/user-provisioning).

Note

[Azure AD is Microsoft Entra ID.](https://learn.microsoft.com/en-us/entra/fundamentals/new-name) But the usage of Azure AD is common. In this document, wherever you see Azure AD, rest assured we mean Microsoft Entra ID as well.

To configure the integration, in the Microsoft Azure console, navigate to Azure AD and click on Enterprise Applications and either create a new application, or select the application you will be using for SCIM provisioning. Once you have selected the application, click on Provisioning in the left navigation under the Manage section.

Here you will find an Update Credentials option in the Manage Provisioning section at the bottom of the page. Expand the Admin Credentials section find the required configuration fields.

Caution

This screenshot is an example only. The preferred integration is to use client credentials so that you do not need to create a long lived token.

If at all possible you should be directly integrating the client credentials grant. Using a long lived token becomes an API key that you cannot revoke.

Home -> Azure AD -> Enterprise Applications -> Provisioning -> Update credentials ![Azure AD SCIM Provisioning Integration](https://fusionauth.io/img/docs/lifecycle/migrate-users/scim/azure-ad-scim-client-credentials.png)

`Tenant URL`

Set this value equal to the FusionAuth SCIM tenant URL found in the Tenant view dialog.

For example, if the base URL for FusionAuth is `https://piedpiper.com`, your SCIM URL will be `https://piedpiper.com/api/scim/resource/v2`

`Secret Token`

This value will be set using the access token generated using the client credentials grant for the SCIM client entity and the SCIM server entity. [Learn more about getting the access token.](https://fusionauth.io/docs/users/provision/scim.md#scim-client-authentication)

Related

[Lambdas SCIM Group Request Converter Lambda Learn how to convert an incoming SCIM group request into a FusionAuth group with a lambda. scim provisioninguser provisioning](https://fusionauth.io/docs/lambdas/scim/scim-group-request-converter.md)

[Lambdas SCIM Group Response Converter Lambda Learn how to convert a FusionAuth group into the SCIM group response a SCIM client expects. scim provisioninguser provisioning](https://fusionauth.io/docs/lambdas/scim/scim-group-response-converter.md)

[Lambdas SCIM User Request Converter Lambda Learn how to convert an incoming SCIM user request into a FusionAuth user with a lambda. scim provisioninguser provisioning](https://fusionauth.io/docs/lambdas/scim/scim-user-request-converter.md)

[Lambdas SCIM User Response Converter Lambda Learn how to convert a FusionAuth user into the SCIM user response a SCIM client expects. scim provisioninguser provisioning](https://fusionauth.io/docs/lambdas/scim/scim-user-response-converter.md)
---

## Other pages in Scim

> For the full index of this section, see [Users](https://fusionauth.io/docs/llms-users.txt).

- [SCIM](https://fusionauth.io/docs/users/provision/scim.md): Learn how to provision users and groups in FusionAuth from a SCIM client.
- [Okta SCIM Client](https://fusionauth.io/docs/users/provision/scim/okta-client.md): Learn how to configure Okta as a SCIM client.
- [SCIM-SDK](https://fusionauth.io/docs/users/provision/scim/scim-sdk.md): Learn how to set up SCIM with a Java program using the SCIM-SDK client.