question

PB-2799 avatar image
0 Votes"
PB-2799 asked PB-2799 commented

Enable User provisioning for an existing Enterprise Application

Hi, We have an internal app that uses Azure AD for Authentication but stores detailed Authorization information for users in its database. When we created the app, we picked the second option "Register an application to integrate with Azure AD (App you're developing)" and as the requirements evolved we built an SCIM endpoint for automatic user provisioning. However, because of the option we chose during creation, we are not able to turn on Automatic user provisioning in Azure AD. An alternative is to create another app just for SCIM/User provisioning, which is not ideal. We could also delete and recreate the App with the correct option that that requires a whole lot of configuration and updates that requires downtime on our apps, which we want to avoid.

So my question is, is there a way to enable Automatic User provisioning on an existing Application?

Note: Publishing the app to Gallery is not an option for us as it's an internal app used only by our Staff: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-howto-app-gallery-listing

Thanks.

azure-ad-app-registrationazure-ad-user-provisioning
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ZollnerD avatar image
0 Votes"
ZollnerD answered PB-2799 commented

Unfortunately, no - you've identified the options available. You'll need to create another app using the custom non-gallery option and either just do provisioning on that app or migrate the other config over.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Precisely what we're trying to avoid - recreating the app. Not sure why this design choice was made by Microsoft. Thanks for your response.

0 Votes 0 ·
MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered PB-2799 commented

Hi @PB-2799,

If you go to Enterprise Applications > Select the application > Provisioning, you should be able to select "Automatic" for the application.

https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/configure-automatic-user-provisioning-portal

Let me know if that is not showing up for you.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

No such option, that's why I posted the question. Thanks for chiming in.

0 Votes 0 ·