Skip to main content
This guide walks through configuring SCIM provisioning with Microsoft Entra ID (formerly Azure AD) to automatically manage Tuple user accounts.
SCIM provisioning requires an existing Microsoft Entra ID SAML integration. Complete the SSO setup first.

​
Prerequisites

You need the SCIM credentials from your Team Management page in Tuple. If you don’t see them, contact support@tuple.app to enable SCIM for your team.

​
Setup

1

Open provisioning settings

In the Microsoft Entra admin center, navigate to your Tuple enterprise application.Select Provisioning in the left sidebar.Provisioning in the left sidebar
2

Set provisioning mode

Click Get started, then set Provisioning Mode to Automatic.
3

Enter admin credentials

Under Admin Credentials, fill in the following fields:Tenant URL
Secret Token — your SCIM username and SCIM password from the Tuple Team Management page, joined with a colon:
For example, if your SCIM username is acme and your SCIM password is abc123, enter acme:abc123. The password alone is not a valid token.Click Test Connection to verify Entra ID can reach Tuple’s SCIM endpoint. A success message confirms the credentials are valid.
4

Configure attribute mappings

Expand Mappings and select Provision Microsoft Entra ID Users.Ensure the following attributes are mapped:
Tuple matches users by userName and stores it as the account’s email address. Map mail to userName, not userPrincipalName: a UPN that differs from the user’s email address creates duplicate accounts and breaks SAML sign-in, which identifies users by email.
Click Save.
5

Turn on provisioning

Return to the Provisioning overview. Set Provisioning Status to On and click Save.Entra ID runs an initial sync cycle, then syncs changes approximately every 40 minutes.