Applies to: OnCAFE, Microsoft Entra ID, SCIM Provisioning

Summary

Microsoft Entra user attribute mapping determines which user profile fields are sent to OnCAFE during SCIM provisioning. These mappings are typically used as default settings to create and update cardholder identity information in OnCAFE, such as first name, last name, and email.

This article explains how to configure and review the default Microsoft Entra user attribute mappings used for OnCAFE provisioning.

Prerequisites

Before reviewing user attribute mappings, confirm the following:

• The Microsoft Entra Enterprise Application has been created.
   
• Provisioning credentials have been configured.
   
• The Microsoft Entra connection test has passed.
   
• Provisioning configuration has been created.
   
• You have access to the Enterprise Application provisioning settings in Microsoft Entra.

Reviewing User Attribute Mapping

To review the Microsoft Entra user attribute mappings:

1. Open the Microsoft Entra Enterprise Application created for OnCAFE.
    
2. From the left-side navigation menu, select Provisioning.
   
   
    
3. After the provisioning configuration is created, select Attribute mapping.
   
   
    
4. Confirm that mappings are enabled for Provision Microsoft Entra ID Groups and Provision Microsoft Entra ID Users.  
   
   
    
5. Verify identity-related information is properly configured.
   
   
    

6. Review the default user attribute mappings. 
    

   NOTES: 
   User attribute mappings are controlled in Microsoft Entra. 
   
   Attribute mappings should be reviewed before enabling provisioning for 
   production users. 
   
   Credential-related attributes, such as card number or facility code, 
   should be configured separately if credential import mapping is required. 
   
   OnCAFE system roles are not configured through Microsoft Entra provisioning. 
   Entra-provisioned users are imported as cardholder-only identities. If a user
   requires an OnCAFE system role, that role must be configured manually in 
   OnCAFE after provisioning.

Common User Attribute Mappings

Common default mappings may include:

These mappings control which user identity values are sent to OnCAFE during provisioning.