Microsoft Entra ID

This guide assumes that you have already enabled SCIM in the Datasaur app and want to use Microsoft Entra ID as the identity provider for both SAML and SCIM integration.

Integrate SCIM 2.0 with Microsoft Entra ID

1. Open the Enterprise Application created during the SAML setup.

2. Go to the Provisioning tab.

3. Set Provisioning Mode to Automatic.

Configure SCIM 2.0

1. In the Admin Credentials section, do the following:

   1. Enter the following Tenant URL:

      https://<datasaur-app-base-url>/api/teams/<your-team-id>/scim/v2.

      Replace <datasaur-app-base-url> and <your-team-id> accordingly.

      1. For SaaS Datasaur-hosted, you can use app.datasaur.ai as the <datasaur-app-base>. If you're self-hosted, adjust accordingly based on your domain.

      2. You can find the team ID in the URL. For example, if you are currently on https://app.datasaur.ai/teams/1/projects, your team ID is 1.

   2. Fill the Secret Token with the API key that you generated before from the Datasaur app.

2. Click Test Connection.

3. Click Save and turn on the Provisioning Status.

Provision users to Datasaur

After provisioning is enabled, Microsoft Entra ID automatically syncs assigned users approximately every 40 minutes.

If you do not want to wait for the next sync cycle, you can manually trigger provisioning for specific users through Provision on demand.

Provision users on demand

1. Open the Provisioning tab.

2. Go to Provision on demand.

3. Select the users you want to provision.

After the next provisioning cycle or an on-demand sync, the users will be added to the orkspace with the default Labeler role.

Prerequisites: Group provisioning requires that the SCIM implementation supports PATCH requests. Microsoft Entra ID will use PATCH operations to manage group membership changes.

1. Go to the Users and groups tab.

2. Click Add user/group.

3. Switch the selection to Groups and select the group you want to assign.

4. Click assign.