Login to Azure Portal. Search and click “Microsoft Entra ID.”

On the left panel, under the manage tab, click “Enterprise Applications.”

To create a SCIM Application, Click “New Application.”
​

Click on “Create your own application.”

Name your application “Right-Hand SCIM” and select the last option, “Integrate any other application you don't find in the gallery (Non-gallery).”

Once the App is created, click “Provision User Accounts.” and Get Started.
​

Select “Automatic” from Provisioning mode. Fill out the Tenant URL and Secret token from the RH Portal.

Go to RH Portal > Company Management > Employees > List > on the top right corner, click Import > select SCIM > enable SCIM Provisioning toggle button > copy webhook URL (tenant URL) and token (secret token).

Copy and paste the tenant URL and secret token into Azure. Click “Test Connection.” Once the connection is built, click save.

Go to Provisioning under the manage tab > Select edit attribute mapping > Under mappings, select Provision Microsoft Entra ID Users > Delete all the unrequited attributes and keep the only ones the app will use > Click save and exit.

Return to the App > Select “Users and Groups” > Click Add Users/Group.
​

Assign users/groups to the app you want to send to the RH portal.

Now, test the SCIM using the Provision on Demand option.

Note: SCIM is currently not activated. Test SCIM with an individual user before initiating the first sync to verify that the user is properly created in Right-Hand Portal.

The user must already be assigned to the app to use the "Provision on demand" feature.

Click on the "Provisioning" section > At the top, click "Provision on demand" > Look for the specific user you want to test > Choose the user > Click "Provision.

Once the test is done and the user is provisioned, Go to the "Provisioning" section >Click "Start provisioning" at the top.

When we start provisioning, all users or groups assigned to the app will be synchronized with the RH Portal. After the first sync is done, look at the Provisioning logs to see who was and wasn't synchronized.