Entra ID Application / User Provisioning (SCIM)

Introduction

WPO365 can help to integrate your WordPress website with Entra ID Application / User Provisioning (SCIM). Doing so, will keep your website’s user data synchronized with Entra ID in “push” mode. This means that you do not need to give your WordPress website permissions to access your Entra ID tenant to retrieve data. Instead, you need to give Azure AD permissions, so it can access your WordPress website.

SCIM stands for System for Cross-domain Identity Management and is an open standard for securely synchronizing users between Saas / Cloud based applications.

Supported features

SCIM 2.0 compatible endpoint for /users

WPO365 can be configured to provide a modern REST API that is a fully SCIM 2.0 compatible endpoint for /users. It can therefore create, update and (soft) delete users, following requests sent to the endpoint by Azure AD’s User provisioning engine.

Please note that at this point in time, WPO365 does not provide a /groups endpoint.

Create new WordPress users

When new people join your team / organization, Entra ID Application / User Provisioning will synchronize them to your WordPress site and WPO365 will automatically create new accounts for them.

Update existing WordPress users

Entra ID Application / User Provisioning will synchronize mapped attributes with your WordPress site and WPO365 will keep your WordPress users up-to-date.

(Soft) Delete existing WordPress users

When people leave your team / organization, Entra ID Application / User Provisioning will ensure that this information is synchronized with your WordPress site and WPO365 will deactivate or delete the corresponding accounts.

User attribute mapping

In addition to the core user schema, the SCIM standard defines an enterprise user extension with a model for extending the user schema to meet your application’s needs.

For example, if your application requires both a user’s email and user’s manager, use the core schema to collect the user’s email and the enterprise user schema to collect the user’s manager.

Plugins with these features

Creating new WordPress users through the SCIM based integration with Entra ID Application / User Provisioning Service is a feature that is included in the WPO365 | LOGIN plugin, that is available at no cost. All other supported features in this article are unlocked when you install the SCIM or the WPO365 | INTEGRATE plugin.