Hyperproof.io

You must be logged in to Microsoft Entra using one of the following roles: Application Administrator, Cloud Application Administrator, or Global Administrator. ​

For information on the entire workflow for configuring SCIM provisioning, see <a href="https://intercom.help/hyperproofio/en/articles/14304638-microsoft-entra-id-scim-configuration" rel="nofollow noopener noreferrer" target="_blank">Microsoft Entra ID SCIM Configuration</a>.

Sign in to the Microsoft Entra Admin Center at <a href="https://entra.microsoft.com" rel="nofollow noopener noreferrer" target="_blank">https://entra.microsoft.com</a>.

Navigate to Entra ID &gt; Enterprise apps.

Open the Hyperproof SCIM application you created. See <a href="https://intercom.help/hyperproofio/en/articles/14304639-adding-a-microsoft-entra-non-gallery-application-for-scim" rel="nofollow noopener noreferrer" target="_blank">Adding a Microsoft Entra non-gallery application for SCIM</a>.

From the left menu, select Provisioning.

Click the Attribute mapping section.

Click Provision Microsoft Entra ID Users.

Remove the following unnecessary mappings. Hyperproof doesn't use them:

<code>addresses[type eq "work"].*</code> (all address fields)

<code>phoneNumbers[type eq "work"].value</code>

<code>phoneNumbers[type eq "mobile"].value</code>

<code>phoneNumbers[type eq "fax"].value</code>

<code>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeId</code>

<code>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department</code>

<code>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager</code>

Make sure the following required mappings are configured: ​

1. Sign in to the Microsoft Entra Admin Center at <a href="https://entra.microsoft.com" rel="nofollow noopener noreferrer" target="_blank">https://entra.microsoft.com</a>.
2. Navigate to Entra ID &gt; Enterprise apps.
3. Open the Hyperproof SCIM application you created. See <a href="https://intercom.help/hyperproofio/en/articles/14304639-adding-a-microsoft-entra-non-gallery-application-for-scim" rel="nofollow noopener noreferrer" target="_blank">Adding a Microsoft Entra non-gallery application for SCIM</a>.
4. From the left menu, select Provisioning.
5. Click the Attribute mapping section.
6. Click Provision Microsoft Entra ID Users.
7. Remove the following unnecessary mappings. Hyperproof doesn't use them:
 <code>name.formatted</code>
 <code>addresses[type eq "work"].*</code> (all address fields)
 <code>phoneNumbers[type eq "work"].value</code>
 <code>phoneNumbers[type eq "mobile"].value</code>
 <code>phoneNumbers[type eq "fax"].value</code>
 <code>timezone</code>
 <code>externalId</code>
 <code>displayName displayName</code>
 <code>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeId</code>
 <code>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department</code>
 <code>urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager</code>
8. Make sure the following required mappings are configured: ​

Scroll to the bottom and click Add New Mapping.

- Mapping type - Expression
- Expression - <code>SingleAppRoleAssignment([appRoleAssignments])</code>
- Target attribute - <code>roles[primary eq "True"].value</code>
- Apply this mapping - Always

These mappings are recommended for richer user data.

1. Scroll to the bottom and click Add New Mapping.
2. Configure the mapping as follows:
 - Mapping type - Expression
 - Expression - <code>SingleAppRoleAssignment([appRoleAssignments])</code>
 - Target attribute - <code>roles[primary eq "True"].value</code>
 - Apply this mapping - Always
3. Click OK.
4. Add the following optional mappings:
 These mappings are recommended for richer user data.

Optionally, configure group mappings as follows:

1. Return to the Attribute mappings section.
2. Click Provision Microsoft Entra ID Groups
3. Delete the following unnecessary mapping: <code>externalID</code>
4. Keep these mappings:
 <code>displayName → displayName</code>
 <code>members → members</code>

1. Optionally, configure group mappings as follows:
 1. Return to the Attribute mappings section.
 2. Click Provision Microsoft Entra ID Groups
 3. Delete the following unnecessary mapping: <code>externalID</code>
 4. Keep these mappings:
 <code>displayName → displayName</code>
 <code>members → members</code>
2. Click Save.

Configuring Microsoft Entra ID attribute mappings for SCIM provisioning

Create a custom design with text, images, and links

Community

Developer Portal

US Status

Training

Terms

EU Status

Workshops

Privacy

Gov Status

Blog

Find answers and get help from Intercom Support and Community Experts

Conversations you've started through the messenger will appear here.

No conversations created by you

Try using different keywords or checking for typos.

No conversations found

Title

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

Advertising cookies are set by our advertising partners to collect information about your use of the site, our communications, and other online services over time and with different browsers and devices. They use this information to show you ads online that they think will interest you and measure the ads' performance. Social media cookies are set by social media platforms to enable you to share content on those platforms, and are capable of tracking information about your activity across other online services for use as described in their privacy policies.

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

These cookies are necessary for the website to function and cannot be switched off in our systems.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Empty Help Center

Uh oh. That page doesn’t exist.

Home

Search results

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

Hyperproof attribute	Microsoft Entra ID attribute	Matching precedence	Notes
`userName`	`mail`	1	Primary identifier
`emails[type eq "work"].value`	`mail`		User's email address
`active`	`Not([IsSoftDeleted])`		User status (active/inactive)
`name.givenName`	`givenName`		First name (required)
`name.familyName`	`surname`		Last name (required)

Hyperproof attribute	Microsoft Entra ID attribute
`title`	`jobTitle`
`locale`	`preferredLanguage`

Configuring Microsoft Entra ID attribute mappings for SCIM provisioning

User mapping

Expression mapping

Group mapping