Applies to: OnCAFE, Microsoft Entra, SCIM Provisioning

Summary

The Microsoft Entra integration token is used to authenticate provisioning requests from Microsoft Entra to OnCAFE. This token is entered into Microsoft Entra as the Secret Token when configuring SCIM provisioning.

This article explains how to generate and copy the Microsoft Entra integration token from OnCAFE.

Prerequisites

Before generating the integration token, confirm the following:

• The Microsoft Entra integration has been enabled in OnCAFE. 
   
• You are logged in to OnCAFE with the required system administrative privileges.

Generating the Integration Token

To generate and copy the integration token:

1. Log in to OnCAFE.
    
2. From the left-side navigation menu, select Organization > Integrations.
   
   
    
3. Locate the Microsoft Entra integration card and click View details.
   
   
    
4. Click Get Token. 
   
   
    

5. In the Integration Token field, click Copy to copy the token. This token is required for the provisioning steps.

   

6. Paste the token into a secured file, such as a Word document or Notepad file.
   
   The integration token is copied and ready to be entered into Microsoft Entra as the Secret Token in the provisioning connectivity configuration.
   
   The integration token identifies the OnCAFE organization during provisioning. Do not append the Organization ID to the Tenant URL.
   
   After updating the token in Microsoft Entra, use Test connection to confirm that provisioning can authenticate successfully.

Security Note: Treat the integration token as a secret credential.

Do NOT share the token in plain text or store it in an unsecured location. 
If the token is compromised, regenerate the token in OnCAFE and update the
Secret Token field in Microsoft Entra.