> ## Documentation Index
> Fetch the complete documentation index at: https://stytch.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.
# Microsoft Entra
> Set up a SCIM connection with Microsoft Entra
To test out SCIM, set up an [Entra developer instance](https://learn.microsoft.com/en-us/entra/verified-id/how-to-create-a-free-developer-account) to use for this guide.
## Configure a SCIM connection for a specific Organization
If you don't already have an application in Entra, create one by navigating to “Applications” → “Enterprise Applications” and selecting “create your own application”.
In the app creation flow, input a name for your application and select “Integrate any other application you didn't find in the gallery".
Once you have an application, enable SCIM by clicking on “Provisioning” on the left hand management side bar, or “Provision User Accounts” under the Getting Started section.
On the next page, click “Get started” and then switch the provisioning mode from “Manual” to “Automatic”.
You should now see an "Admin Credentials" section. Leave this tab open, and navigate back to Stytch.
Create a SCIM Connection on the Organization in the [Stytch Dashboard](https://stytch.com/dashboard/organizations) or the [Create SCIM Connection endpoint](/api-reference/b2b/api/scim/connection-management/create-scim-connection). Select Microsoft Entra as the IdP.
Once you click save, you'll be provided with the base url and bearer token you'll need for the next step.
Leave this tab open and navigate back to Entra to input the returned credentials.
On the "Provisioning" tab under "Admin Credentials":
1. Copy the "BaseURL" from Stytch into the “Tenant URL” field
2. Copy the "HTTP Header Bearer Token" from Stytch into the "Secret Token" field
If you did not specify an IdP when creating the SCIM Connection, you must append `?aadOptscim062020` to the returned BaseURL to flag the application into [Entra's SCIM 2.0 compliant version](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/application-provisioning-config-problem-scim-compatibility#scim-20-compliance-issues-and-status)
Click "Test Connection", then save.
Navigate back to “Provisioning”, and
1. Under "Mappings" ensure that `objectId` is mapped to `externalId` (i.e. `objectId` is set to the "Source" attribute and `externalId` is set to the "Target" attribute).
2. Toggle "Provisioning Status" to “On”.
Once saved, you can test the SCIM integration by assigning people to and removing people from the application. Entra does automatic syncing on a 40 minute timer, but you can provision on demand to speed up testing.
You should see the status of the member changing from `active` to `deactivated`.
To notify your own system of changes that occur via SCIM, [configure webhooks](/resources/workspace-management/webhooks). See the full list of relevant webhooks [here](/multi-tenant-auth/enterprise-ready/scim/overview#supported-scim-actions).
## Next Steps
If you only have a few customers who require SCIM connections, you can manage them by hand in the [Stytch Dashboard](https://stytch.com/dashboard/organizations). However, as your enterprise customer base grows, you may want to build a UI in your application to allow admins of Organizations to self-serve creating and updating their own SCIM connections.
The simplest way to add SCIM connection management to your application is to use Stytch's pre-built [Admin Portal](/multi-tenant-auth/enterprise-ready/admin-portal) component.
Read the guide on Admin Portal.
Jump straight to the React, Next.js, or Vanilla JS SDK reference.