entra.rst

Entra

References:

• Use SCIM to provision users and groups

Setup

Create application

• Connect to your Azure portal
• Click on Add
• then Enterprise application.

• Click on Create your application.
• In the section that appears on the right, enter the name of your application and choose the 3rd option `integrate any other application don't find in the gallery`.

Setup the application

• Once you've created your application, go to Provisioning.

• Select Automatic.
• Specify the URL generated earlier from GLPI and paste the token.

Warning

Make sure you paste the token (JWT token) to ensure your application works properly.

• Click on Test connection. A message will appear informing you of the successful connection.

• On the same page, you can also configure an email address and a number in case of failure or accidental deletions.

• Click on Save

Synchronising all users

• You can choose to synchronise your entire directory.
• Go to the Settings > Scope tab and select Sync all users and groups.

Synchronising selected groups and users (default option)

• You can choose to synchronise only certain groups and/or users. When refreshing the `Provisionning` page
• Go to the Parameters > Scope tab
• Select Synchronise assigned users and groups only

• Then go to Users and groups
• Click on Add a user/group
• Click on No selection
• Select the groups and users you want in the box on the right
• Then Select and Assign.

Activate provisioning

• In the Provisioning section
• Change the status from Disabled to Enabled

Check synchronisation status

• In the Overview section, you can check that synchronisation has been successful.

• On the GLPI side, Go to the Request log section of your SCIM plugin Setup > SCIM identity servers to check that the accounts are correctly synchronised.

Important

See the procedure for setting up the OAuth SSO plugin to authenticate users on GLPI.