Applies to: OnCAFE, Microsoft Entra ID, SCIM Provisioning

Summary

OnCAFE credential attributes must be added to the Microsoft Entra attribute list before credential-related values can be mapped during SCIM provisioning. The following attributes allow Microsoft Entra to send card-related values to OnCAFE, such as card number, facility code, and credential status.

NOTE: Confirm which Microsoft Entra attributes the customer intends to use for card 
number, facility code, and credential status before configuring production mappings.

This article explains how to add the supported OnCAFE credential attributes to the Microsoft Entra attribute list.

The following OnCAFE credential attributes can be added to Microsoft Entra:

Prerequisites

Before adding OnCAFE credential attributes, confirm the following:

• The Microsoft Entra Enterprise Application has been created.
• Provisioning credentials have been configured.
• The Microsoft Entra connection test has passed.
• Attribute Mapping is available in the provisioning configuration.
• Credential import mapping is required.

Adding OnCAFE Credential Attributes

To add the OnCAFE credential attributes:

1. Open the Microsoft Entra Enterprise Application created for OnCAFE.
    
2. From the Enterprise Application menu, select Provisioning > Attribute mapping > Provision Microsoft Entra Users.
   
   
    
3. From the attribute mapping page, select Show advanced options.
   
   
    
4. Select Edit attribute list for customappsso.
    

5. Add the required OnCAFE credential attributes.
    

   NOTE: Attribute names are case-sensitive.

   Attribute	Type
   CardNumber	String
   FacilityCode	String
   CardStatus	Boolean

   

6. Confirm the correct data type for each attribute.
    
7. Select Save.
    

8. When prompted, select Yes to confirm the change.
   
   
   
   Once the OnCAFE credential attributes are added to the Microsoft Entra target attribute list, Microsoft Entra source attributes can be mapped to the OnCAFE target credential attributes. The OnCAFE credential attributes must be added before they can be selected as target attributes in Microsoft Entra.

   NOTE: Updating the attribute list may cause Microsoft Entra to restart 
   provisioning and re-evaluate users.

   IMPORTANT: Adding the attributes does not complete credential mapping. The 
   Microsoft Entra source attributes must still be mapped to the OnCAFE target 
   attributes.