Microsoft Entra expands SCIM support

Microsoft Entra now exposes SCIM 2.0 server APIs so external SCIM clients can provision, update, and deprovision users and groups in Entra using standard SCIM schemas, group membership handling, discovery endpoints, and reuse of existing SCIM automation and provisioning patterns.

Microsoft Entra has added SCIM 2.0 APIs to act as a SCIM service provider. External SCIM clients can now provision and manage users and groups directly into Entra.

Main feature and impact

Microsoft Entra now exposes SCIM 2.0 APIs that accept standard SCIM operations. External clients can provision, update, and deprovision users and groups. This reduces custom connectors and aligns Entra with existing SCIM tooling. Organizations can reuse provisioning patterns from HR systems and identity platforms. The change standardizes inbound provisioning and simplifies identity lifecycle automation.

Practical implications

Identity teams can integrate orchestration tools and custom automation frameworks with Entra. Supported operations include user attribute updates, group membership management, and schema discovery. Entra supports Microsoft Entra ID security groups and Microsoft 365 groups. The APIs are GA in the public cloud and will reach US Government clouds by end of June 2026. Consumption-based licensing applies; consult pricing documentation.

“Today, we’re extending our support for standards‑based identity lifecycle automation by introducing Microsoft Entra SCIM 2.0 APIs.”

Microsoft Entra SCIM 2.0 APIs let teams consolidate provisioning flows and reduce bespoke integrations. Follow Microsoft Learn documentation to enable the APIs and map SCIM schemas. Evaluate licensing, test attribute mappings, and update automation scripts to use Entra endpoints.

Key points from the article:

SCIM 2.0 server APIs let external clients provision users into Entra.

Supports user attribute updates using SCIM schemas and extensions.

Manages Entra ID security and Microsoft 365 group membership.

Enables reuse of existing SCIM automation and provisioning patterns.

Generally available in public cloud; US Gov availability by end of June 2026.

Related Coverage:

• Windows 365 Frontline in shared mode expands to New Zealand North, Mexico Central, and Europe
• Announcing three new partners for multi-tenant management with Microsoft Intune
• Safeguard, Restore, and Manage Deleted Records in Microsoft Dataverse

From the Microsoft Entra Blog articles

---