Skip to main content

Configuring SCIM in Microsoft Entra

Enabling SCIM in Microsoft Entra

To configure SCIM in Microsoft Entra:

  1. Login in to Microsoft Entra account.

  2. In the Left navigation, browse to Identity > Applications > Enterprise applications.

  3. The Enterprise applications | All applications page opens. On this page, either open an already existing application that you have created for single sign-on with data.world, or create a new one. If you are using an existing application, skip to Step 8.

  4. To create a new application, click the New application button.

  5. On the Browse Microsoft Entra Gallery page, click the Create your own application button.

  6. On the Create your own application page that opens, set the following:

    1. What's the name of your app: Provide a name for the application.

    2. What are you looking to do with your application: Select Integrate any other application you don't find in the gallery (Non-gallery).

    3. Click Create. The newly created application page opens.

    The newly created application page opens.

  7. In the left navigation of the application page, browse to Manage > Single sign-on and configure SSO with data.world.

  8. In the left navigation of the application page, browse to Manage > Provisioning.

  9. On the Automate identity lifecycle management with Microsoft Entra page, click the Get started button.

  10. On the Provisioning page, set the following:

    1. Set the Provisioning Mode to Automatic.

    2. In the Admin Credentials section, in the Tenant URL field provide the URL as: https://api.data.world/v2/scim?aadOptscim062020. In the Secret Token field provide the service token you copied from data.world.

    3. Click Test connection. to make sure you configured everything correctly.

    4. Click Save.

Provisioning user groups in Microsoft Entra

Groups in Microsoft Entra serve the function of managing access to various resources. When setting up these groups, it is important to organize users based on similar access requirements. Once the groups are established and synced with data.world, they are transformed into Teams within data.world. You can subsequently assign these Teams to specific catalog organizations, allowing you to control their access to data.world resources efficiently.

To provision user groups in Microsoft Entra:

  1. In the left navigation of the application page, click Manage > Users and groups.

  2. Click the Add users and groups button and add your IDP user groups to the application.

  3. Based on your configuration, the group will automatically get added in data.world as a team.

  4. Likewise, remove the user group from the application to deprovision all the users in the group. If you want to revoke access of individual users, just removed them from the group that is provisioned to data.world.

In this section: