Skip to main content
Enterprise Plan Feature: SCIM Directory Sync is available exclusively for workspaces on the Enterprise plan.
For Biqli Enterprise users, you can automatically provision and deprovision users from Azure AD (Entra ID) to Biqli using SCIM Directory Sync.

​
Prerequisites

Before configuring SCIM Directory Sync, you must first create and configure a SAML application in Azure AD.

Create Azure AD SAML Application

Follow our guide to configure Azure AD SAML Single Sign-On for your Biqli Workspace.

​
Step 1: Configure Directory Sync on Biqli

Navigate to your workspace Security Settings. Under the Directory Sync section, click Configure SCIM to start setting up SCIM provisioning.
Biqli Directory Sync Settings
In the SCIM configuration modal:
  1. Select Identity Provider: Choose Microsoft Entra ID as your directory provider.
  2. Enable SCIM: Toggle on SCIM directory synchronization.
  3. Click Save changes.
Select Microsoft Entra ID and Enable SCIM
This will generate a Directory Sync connection for your Biqli workspace and return 2 values which you will need in Step 2:
  • Tenant URL
  • Secret Token
Copy SCIM Credentials

​
Step 2: Add Provisioning to SAML Application

Open the Provisioning tab of your existing Biqli Azure AD SAML application in the Azure Portal. Click Connect your application (or Get started).
Connect your application
Under the Admin Credentials section, enter the values you obtained in Step 1:
  1. Tenant URL: Paste the Tenant URL.
  2. Secret Token: Paste the Secret Token.
Enter Admin Credentials
Click Test Connection to validate the credentials, then click Save (or Create) to store the configuration. From the left sidebar, select Provisioning, expand the Mappings section, and click on Provision Microsoft Entra ID Users.
Azure AD Provisioning Mappings
Scroll down to the externalId attribute mapping row and click Edit.
Edit externalId Attribute
Change the Source attribute dropdown value to objectId, then click OK.
Map Source to objectId
Click Save in the top menu to store the attribute mapping configuration, then close the mapping details pane using the X in the top-right corner.
Save mappings and exit
Expand the Settings section on the provisioning configuration page:
  • Set the Scope dropdown to Sync only assigned users and groups.
  • Verify that the Provisioning Status toggle is set to On.
Click Save at the top of the settings page.
Enable Provisioning Settings

​
Step 3: Assign Users

Once SCIM Directory Sync is configured, you can assign users to Biqli directly within Azure AD, and they will be automatically provisioned. Go to Users and groups in the left menu, and click Add user/group.
Add Users and Groups
Click None Selected under Users, select your users, click Select, and click Assign to confirm.
Assign Users to SAML app
Your assigned users will now have their accounts automatically created in Biqli, attached to the workspace, and enabled to sign in.

​
Technical Notes

Sync Latency: Azure AD SCIM provisioning runs on a background schedule and can take between 20 to 40 minutes to synchronize. If you need users to be added immediately, you can use Azure’s Provision on Demand option to trigger instant syncing for selected users.