Fieldglass - Azure AD Integration

[victorpanov]

Looking for background on how to integrate Fieldglass with Azure AD (cloud)? Please read below and let me know if you've ever stumbled upon this and if you know how to resolve from FG's end.

The Azure AD Team we're working with had contacted Microsoft for help on this and we were told that as of now no other protocol other than SCIM can be used there for user provisioning of "non-gallery" applications such as Fieldglass. In addition they've shared:

If the application is not found in the Azure AD SaaS App Gallery, we have following steps follow:

1.) Create a request for a pre-integrated user provisioning connector. Microsoft team will work with us and the application developer to onboard our application to Azure if it supports SCIM.

2.) Use the BYOA SCIM generic user provisioning support for the app. This is a requirement for Azure AD to provision users to the app without a pre-integrated provisioning connector.

3.) If the application is able to utilize the BYOA SCIM connector, then refer to BYOA SCIM integration tutorial to configure the BYOA SCIM connector for the application.

You can use the System for Cross-Domain Identity Management (SCIM) user management API to enable automatic provisioning of users and groups between your application and Azure AD (AAD).

Please connect with OEM application team / developer to create SCIM endpoint following below documents:

https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/use-scim-to-provision-users...

Plan application connections and administration

• https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/plan-auto-user-provisioning...
  

As an application developer, we can use the System for Cross-Domain Identity Management (SCIM) user management API to enable automatic provisioning of users and groups between our application and Azure AD (AAD).

To plan and develop the application's SCIM endpoint, please see the below guide for additional details.

Tutorial: Develop and plan provisioning for a SCIM endpoint in Azure Active Directory

• https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/use-scim-to-provision-users...
  

This article describes how to build a SCIM endpoint and integrate with the AAD provisioning service. The SCIM specification provides a common user schema for provisioning.

When used in conjunction with federation standards like SAML or OpenID Connect, SCIM gives administrators an end-to-end, standards-based solution for access management.