SCIM: Configuring Microsoft Azure to Allow Provisioning for InVision V6

This article provides information on an open beta feature for InVision V6 Enterprise teams.

InVision V6 now offers support for SCIM provisioning via Okta, OneLogin, and Azure. If you haven't implemented SCIM provisioning for your Enterprise, please reach out to your Customer Success Manager to get rolling while the feature is in open beta.

Before you can configure Azure to allow user provisioning for InVision, you'll need to set up SSO with Azure.

Configuring Azure to allow SCIM provisioning

InVision V6 Enterprise teams can configure Azure to enable System for Cross-domain Identity Management (SCIM) provisioning for their InVision members. Before you can configure Azure for SCIM provisioning, an owner on the Enterprise will first need to enable SCIM provisioning in InVision V6.

To configure Azure to allow SCIM provisioning for your InVision Enterprise members:

1. Sign in to your Azure admin page, and navigate to the Azure Active Directory.
2. In menu on the left, click Enterprise applications and then click InVision.
3. Again in the menu on the left, click Provisioning and complete the set-up steps as prompted.
4. Click the Provisioning Mode dropdown and select Automatic.
5. In the Tenant URL field, enter the SCIM API URL you saved in step 5 of the Enabling SCIM provisioning in InVision V6 instructions.
   Note: Remember, Azure requires the complete URL: https://your—team—name.invisionapp.com/scim/v2
6. In the Secret Token field, paste the authentication token you copied in step 6 of the Enabling SCIM provisioning in InVision V6 instructions.
7. Click Test Connection and verify that the SCIM credentials are working.
8. Click Save.

You can now assign people to the app as needed and finish setting up the InVision application in Azure.

Warning: Editing a user's email address and/or name in your IdP app will not update that user's profile in InVision V6.

Assigning InVision access to your Azure users

After establishing SCIM provisioning, you can assign the InVision app to your users in Azure.

To assign the InVision app to your Azure users:

1. Sign in to your Azure admin page, and navigate to the Azure Active Directory.
2. In menu on the left, click All users.
3. Click New user, complete the fields under Identity and Password, and click Create.
4. In menu on the left, click Enterprise applications and then click InVision.
5. Click Users and groups, click Add user, and assign the InVision app to the new user.
6. In the menu on the left, click Provisioning and then click Provision on demand.
7. In the search bar, enter a user's name, select the result, and click Provision.

After completing the steps above, you should see a message confirming that the user has been successfully provisioned for InVision V6.

Learning more about SCIM provisioning for InVision V6

To learn more about SCIM provisioning for InVision V6, see these related articles:

• SCIM Provisioning
• How can I check if provisioning or deprovisioning a member of my Enterprise failed?
• Why can’t I see the authentication token in my SCIM settings?