Skip to main content

How to Configure SAT SCIM in Microsoft Entra

Melissa
  • Updated

Team: Huntress Managed Security Awareness Training (SAT)
Product: Microsoft Entra - SCIM Integration
Summary: This article covers how to configure System for Cross-domain Identity Management (SCIM) for your Huntress Security Awareness Training (SAT) instance within the Microsoft Entra admin console. This does support GCC High Tenants. 

 

In Huntress SAT

  1. Access your SAT platform as an admin user.
  2. Go to Settings > Integrations > SCIM.
  3. Create a SCIM Token by clicking + Connect a group and choosing the desired SAT target group.
    • All new learners will be added to this group.
    • Any existing users will be associated with your Identity Provider (IDP) via SCIM but will remain in their currently assigned group.
  4. If you want to have multiple SAT groups with SCIM sync, you will need multiple connections on the SAT side and multiple apps in the IDP.
    • Note: If you go this route, ensure you don't have learners in both apps, as their user data may be overridden.

 

In Microsoft Entra

  1. Access the Microsoft Entra Admin Center: https://entra.microsoft.com/#home
  2. Go to Enterprise Applications.
  3. Click New Application.
  4. Click Create your own application.
  5. Provide an application name and select the Non-gallery radio button.


     
  6. Go to Manage > Provisioning.
  7. Click Connect your application.
  8. Enter the following:
  9. Click Test connection to verify the credentials are working.
  10. Click Create to create the Provisioning configuration.
  11. Go to Manage > Provisioning.

  12. Under Mappings, disable syncing for Groups.
     

  13. Edit the User Mappings to only include supported attributes below. Adding additional attributes may cause unexpected behavior.
    • SCIM User Schema
      • userName (must be the user’s email address)
      • active
      • name.givenName
      • name.familyName
      • locale
      • preferredLanguage
      • timezone
    • Enterprise User Schema
      • department
      • employeeNumber
      • manager.value (either the email address or ID of the manager)


         
  14. Under Settings, adjust the Scope field if desired.


     
  15. If Sync only assigned users and groups is selected, add the users and/or groups you intend to sync to the application under Users and groups.
  16. If desired, use the Provision on demand option to test the sync for a given user.
  17. When ready to enable syncing for the application, click Start provisioning under Overview.
    • Note: Provisioning doesn't start right away and will apply during the next scheduled run.

Related articles