You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/saas-apps/insite-lms-provisioning-tutorial.md
+31-26Lines changed: 31 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,14 +41,18 @@ The scenario outlined in this tutorial assumes that you already have the followi
41
41
1. Determine what data to [map between Azure AD and Insite LMS](../app-provisioning/customize-application-attributes.md).
42
42
43
43
## Step 2. Configure Insite LMS to support provisioning with Azure AD
44
+
To generate the Secret Token
44
45
45
-
1. Navigate to `https://portal.insitelms.net/<OrganizationName>`.
46
-
1. Download and install the Desktop Client.
47
-
1. Log in with your Admin Account and Navigate to **Users** Module.
48
-
1. Select the User `[email protected]` and press the button **Generate Access Token**. If you can't find the scim-User, contact the Support-Team
49
-
1. Choose **AzureAdScimProvisioning** and press **generate**
50
-
1. Copy the **AccessToken**
51
-
1. The **Tenant Url** is `https://web.insitelms.net/<OrganizationName>/api/scim`.
46
+
1. Login to [Insite LMS Admin Console](https://portal.insitelms.net/organization/applications).
47
+
1. Navigate to **Self Hosted Jobs**. You will find a job named “SCIM”.
48
+
49
+
50
+
51
+
1. Click on **Generate Api Key**.
52
+
Copy and save the **Api Key**. This value will be entered in the **Secret Token** field in the Provisioning tab of your Insite LMS application in the Azure portal.
53
+
54
+
>![NOTE]
55
+
>The Access Token is only valid for 1 year.
52
56
53
57
## Step 3. Add Insite LMS from the Azure AD application gallery
54
58
@@ -63,64 +67,65 @@ The Azure AD provisioning service allows you to scope who will be provisioned ba
63
67
* If you need additional roles, you can [update the application manifest](../develop/howto-add-app-roles-in-azure-ad-apps.md) to add new roles.
64
68
65
69
66
-
## Step 5. Configure automatic user provisioning to Insite LMS
70
+
## Step 5. Configure automatic user provisioning to Insite LMS
67
71
68
72
This section guides you through the steps to configure the Azure AD provisioning service to create, update, and disable users and/or groups in Insite LMS app based on user and group assignments in Azure AD.
69
73
70
74
### To configure automatic user provisioning for Insite LMS in Azure AD:
71
75
72
76
1. Sign in to the [Azure portal](https://portal.azure.com). Select **Enterprise Applications**, then select **All applications**.
87
91
88
-
1. In the **Admin Credentials** section, enter your Insite LMS **Tenant URL** and **Secret token** information. Select **Test Connection** to ensure that Azure AD can connect to Insite LMS. If the connection fails, ensure that your Insite LMS account has admin permissions and try again.
92
+
1. In the **Admin Credentials** section
93
+
enter your Insite LMS **Tenant URL** as `https://api.insitelms.net/scim` and enter the **Secret token** generated in Step 2 above. Select **Test Connection** to ensure that Azure AD can connect to Insite LMS. If the connection fails, ensure that your Insite LMS account has admin permissions and try again.
91
96
92
97
1. In the **Notification Email** field, enter the email address of a person or group who should receive the provisioning error notifications. Select the **Send an email notification when a failure occurs** check box.
95
100
96
101
1. Select **Save**.
97
102
98
103
1. In the **Mappings** section, select **Synchronize Azure Active Directory Users to Insite LMS**.
99
104
100
105
1. Review the user attributes that are synchronized from Azure AD to Insite LMS in the **Attribute Mapping** section. The attributes selected as **Matching** properties are used to match the user accounts in Insite LMS for update operations. If you change the [matching target attribute](../app-provisioning/customize-application-attributes.md), you'll need to ensure that the Insite LMS API supports filtering users based on that attribute. Select **Save** to commit any changes.
101
106
102
-
|Attribute|Type|Supported for filtering|
103
-
|---|---|---|
104
-
|userName|String|✓|
105
-
|emails[type eq "work"].value|String|✓|
106
-
|active|Boolean|
107
-
|name.givenName|String|
108
-
|name.familyName|String|
109
-
|phoneNumbers[type eq "work"].value|String|
107
+
|Attribute|Type|Supported for filtering|Required by Insite LMS|
1. To configure scoping filters, see the instructions provided in the [Scoping filter tutorial](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
112
117
113
118
1. To enable the Azure AD provisioning service for Insite LMS, change **Provisioning Status** to **On** in the **Settings** section.
114
119
115
-
120
+
116
121
117
122
1. Define the users or groups that you want to provision to Insite LMS by selecting the desired values in **Scope** in the **Settings** section.
124
129
125
130
This operation starts the initial synchronization cycle of all users and groups defined in **Scope** in the **Settings** section. The initial cycle takes longer to do than next cycles, which occur about every 40 minutes as long as the Azure AD provisioning service is running.
0 commit comments