Configuring SCIM Directory Sync with Azure AD

For Biqli Enterprise users, you can automatically provision and deprovision users from Azure AD (Entra ID) to Biqli using SCIM Directory Sync.

​

Prerequisites

Before configuring SCIM Directory Sync, you must first create and configure a SAML application in Azure AD.

​

Step 1: Configure Directory Sync on Biqli

Navigate to your workspace Security Settings. Under the Directory Sync section, click Configure SCIM to start setting up SCIM provisioning. In the SCIM configuration modal:

1. Select Identity Provider: Choose Microsoft Entra ID as your directory provider.
2. Enable SCIM: Toggle on SCIM directory synchronization.
3. Click Save changes.

This will generate a Directory Sync connection for your Biqli workspace and return 2 values which you will need in Step 2:

• Tenant URL
• Secret Token

​

Step 2: Add Provisioning to SAML Application

Open the Provisioning tab of your existing Biqli Azure AD SAML application in the Azure Portal. Click Connect your application (or Get started). Under the Admin Credentials section, enter the values you obtained in Step 1:

1. Tenant URL: Paste the Tenant URL.
2. Secret Token: Paste the Secret Token.

Click Test Connection to validate the credentials, then click Save (or Create) to store the configuration. From the left sidebar, select Provisioning, expand the Mappings section, and click on Provision Microsoft Entra ID Users. Scroll down to the externalId attribute mapping row and click Edit. Change the Source attribute dropdown value to objectId, then click OK. Click Save in the top menu to store the attribute mapping configuration, then close the mapping details pane using the X in the top-right corner. Expand the Settings section on the provisioning configuration page:

• Set the Scope dropdown to Sync only assigned users and groups.
• Verify that the Provisioning Status toggle is set to On.

Click Save at the top of the settings page.

​

Step 3: Assign Users

Once SCIM Directory Sync is configured, you can assign users to Biqli directly within Azure AD, and they will be automatically provisioned. Go to Users and groups in the left menu, and click Add user/group. Click None Selected under Users, select your users, click Select, and click Assign to confirm. Your assigned users will now have their accounts automatically created in Biqli, attached to the workspace, and enabled to sign in.

---

​

Technical Notes