> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tuple.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID

> How to set up SCIM provisioning in Tuple with Microsoft Entra ID

This guide walks through configuring SCIM provisioning with Microsoft Entra ID (formerly Azure AD) to automatically manage Tuple user accounts.

<Info>
  SCIM provisioning requires an existing [Microsoft Entra ID SAML integration](/team-management/sso-azure). Complete the SSO setup first.
</Info>

## Prerequisites

You need the SCIM credentials from your [Team Management page](https://production.tuple.app/team_management/invitations) in Tuple. If you don't see them, contact [support@tuple.app](mailto:support@tuple.app) to enable SCIM for your team.

## Setup

<Steps>
  <Step title="Open provisioning settings">
    In the [Microsoft Entra admin center](https://entra.microsoft.com), navigate to your Tuple enterprise application.

    Select **Provisioning** in the left sidebar.

    <img src="https://mintcdn.com/tuple-0f82e5be/mvUxndXY5Na4FaZB/images/team-management/scim/entra-id/provisioning-nav.png?fit=max&auto=format&n=mvUxndXY5Na4FaZB&q=85&s=e20fddbcf0b30de04a1479f14f4e3cb6" alt="Provisioning in the left sidebar" width="648" height="514" data-path="images/team-management/scim/entra-id/provisioning-nav.png" />
  </Step>

  <Step title="Set provisioning mode">
    Click **Get started**, then set **Provisioning Mode** to **Automatic**.
  </Step>

  <Step title="Enter admin credentials">
    Under **Admin Credentials**, fill in the following fields:

    **Tenant URL**

    ```
    https://production.tuple.app/scim/v2
    ```

    **Secret Token** -- paste the bearer token from your Tuple Team Management page.

    Click **Test Connection** to verify Entra ID can reach Tuple's SCIM endpoint. A success message confirms the credentials are valid.
  </Step>

  <Step title="Configure attribute mappings">
    Expand **Mappings** and select **Provision Microsoft Entra ID Users**.

    Ensure the following attributes are mapped:

    | Microsoft Entra ID attribute | SCIM attribute                 |
    | ---------------------------- | ------------------------------ |
    | `mail`                       | `emails[type eq "work"].value` |
    | `givenName`                  | `name.givenName`               |
    | `surname`                    | `name.familyName`              |
    | `userPrincipalName`          | `userName`                     |

    Click **Save**.
  </Step>

  <Step title="Turn on provisioning">
    Return to the **Provisioning** overview. Set **Provisioning Status** to **On** and click **Save**.

    Entra ID runs an initial sync cycle, then syncs changes approximately every 40 minutes.
  </Step>
</Steps>