Applies to: OnCAFE, Microsoft Enra ID, SCIM Provisioning
Summary
Microsoft Entra uses provisioning credentials to connect to the OnCAFE SCIM endpoint. These credentials include the OnCAFE SCIM Tenant URL and the Integration Token generated from the OnCAFE Microsoft Entra integration settings.
This article explains how to configure the provisioning credentials in Microsoft Entra.
Prerequisites
Before configuring provisioning credentials, confirm the following:
- The Microsoft Entra integration has been enabled in OnCAFE.
- The OnCAFE Integration Token has been generated and copied.
- The non-gallery Enterprise Application has been created in Microsoft Entra.
- You have access to the Enterprise Application provisioning settings.
Configuring Provisioning Credentials
To configure provisioning credentials:
- Open the Enterprise Application created for the OnCAFE integration.
- From the left-side navigation menu, select Provisioning.
- Click the + New Configuration tab to create a new provisioning configuration.
- From the Select authentication method drop-down menu, select Bearer authentication.
-
In the Tenant URL field, enter the OnCAFE SCIM URL for the correct environment.
IMPORTANT: Do NOT append the Organization ID to the Tenant URL. Example: https://api.platform.hanwhavision.cloud/scim/v2
- In the Secret token field, enter the OnCAFE Integration Token.
The Organization is identified through the OnCAFE Integration Token.
To get the token, refer to OnCAFE: Generating a Microsoft Entra Integration Token
- Click Test connection.
- Confirm that the connection test succeeds.
If the connection test fails, confirm the Tenant URL and Secret Token are correct.
- Click Create.
Microsoft Entra is now connected to the OnCAFE SCIM endpoint using the configured Tenant URL and Secret Token. After the configuration is created, attribute mappings and provisioning settings can be configured.