Skip to content

Commit ad08953

Browse files
committed
doc-1
1 parent fe2d963 commit ad08953

File tree

9 files changed

+42
-40
lines changed

9 files changed

+42
-40
lines changed
15.8 KB
Loading
8.12 KB
Loading
8.69 KB
Loading

articles/active-directory/saas-apps/smartsheet-provisioning-tutorial.md

Lines changed: 42 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -2,15 +2,18 @@
22
title: 'Tutorial: Configure Smartsheet for automatic user provisioning with Azure Active Directory | Microsoft Docs'
33
description: Learn how to configure Azure Active Directory to automatically provision and de-provision user accounts to Smartsheet.
44
services: active-directory
5+
documentationcenter: ''
56
author: twimmers
6-
writer: twimmers
7-
manager: CelesteDG
7+
writer: Thwimmer
8+
manager: beatrizd
9+
ms.assetid: 9d391bd3-b0d3-4c7d-af8a-70bc0a538706
810
ms.service: active-directory
911
ms.subservice: saas-app-tutorial
1012
ms.workload: identity
13+
ms.devlang: na
1114
ms.topic: tutorial
1215
ms.date: 06/07/2019
13-
ms.author: jeedes
16+
ms.author: Thwimmer
1417
---
1518

1619
# Tutorial: Configure Smartsheet for automatic user provisioning
@@ -36,45 +39,44 @@ The scenario outlined in this tutorial assumes that you already have the followi
3639
* A user account in Azure AD with [permission](../roles/permissions-reference.md) to configure provisioning (e.g. Application Administrator, Cloud Application administrator, Application Owner, or Global Administrator).
3740
* [A Smartsheet tenant](https://www.smartsheet.com/pricing).
3841
* A user account on a Smartsheet Enterprise or Enterprise Premier plan with System Administrator permissions.
42+
* **System Admins** and an **IT Administrator** can set up Active Directory with Smartsheet
3943

4044
## Step 1. Plan your provisioning deployment
4145
1. Learn about [how the provisioning service works](../app-provisioning/user-provisioning.md).
42-
2. Determine who will be in [scope for provisioning](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
43-
3. Determine what data to [map between Azure AD and Smartsheet](../app-provisioning/customize-application-attributes.md).
46+
1. Determine who will be in [scope for provisioning](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
47+
1. Determine what data to [map between Azure AD and Smartsheet](../app-provisioning/customize-application-attributes.md).
4448

4549
## Step 2. Configure Smartsheet to support provisioning with Azure AD
4650

4751
Before configuring Smartsheet for automatic user provisioning with Azure AD, you will need to enable SCIM provisioning on Smartsheet.
4852

49-
1. Sign in as a **SysAdmin** in the **[Smartsheet portal](https://app.smartsheet.com/b/home)** and navigate to **Account Admin**.
53+
1. Sign in as a **System Admin** in the **[Smartsheet portal](https://app.smartsheet.com/b/home)** and navigate to **Account > Admin Center**.
5054

51-
![Smartsheet Account Admin](media/smartsheet-provisioning-tutorial/smartsheet-accountadmin.png)
55+
![Screenshot of Smartsheet Account Admin](media/smartsheet-provisioning-tutorial/smartsheet-admin-center.png)
5256

53-
2. Go to **Security Controls > User Auto Provisioning > Edit**.
57+
1. In the Admin Center page click on the **Menu** option to expose the Menu panel.
5458

55-
![Smartsheet Security Controls](media/smartsheet-provisioning-tutorial/smartsheet-securitycontrols.png)
59+
![Screenshot of Smartsheet Security Controls](media/smartsheet-provisioning-tutorial/smartsheet-menu.png)
5660

57-
3. Add and validate the email domains for the users that you plan to provision from Azure AD to Smartsheet. Choose **Not Enabled** to ensure that all provisioning actions only originate from Azure AD, and to also ensure that your Smartsheet user list is in sync with Azure AD assignments.
61+
1. Navigate to **Menu > Settings > Domains & User Auto-Provisioning**.
5862

59-
![Smartsheet User Provisioning](media/smartsheet-provisioning-tutorial/smartsheet-userprovisioning.png)
63+
![Screenshot of Smartsheet domain](media/smartsheet-provisioning-tutorial/smartsheet-domain.png)
6064

61-
4. Once validation is complete, you will have to activate the domain.
65+
1. To add a new domain click on **Add Domain** and follow instructions.Once the domain is added make sure it gets verified as well.
6266

63-
![Smartsheet Activate Domain](media/smartsheet-provisioning-tutorial/smartsheet-activatedomain.png)
64-
65-
5. Generate the **Secret Token** required to configure automatic user provisioning with Azure AD by navigating to **Apps and Integrations**.
67+
1. Generate the **Secret Token** required to configure automatic user provisioning with Azure AD by navigating to **Apps and Integrations**.
6668

6769
![Screenshot of the Smartsheet Admin page with the user avatar and the Apps & Integrations option called out.](media/smartsheet-provisioning-tutorial/Smartsheet05.png)
6870

69-
6. Choose **API Access**. Click **Generate new access token**.
71+
1. Choose **API Access**. Click **Generate new access token**.
7072

7173
![Screenshot of the Personal Settings dialog box with the API Access and Generate new access token options called out.](media/smartsheet-provisioning-tutorial/Smartsheet06.png)
7274

73-
7. Define the name of the API Access Token. Click **OK**.
75+
1. Define the name of the API Access Token. Click **OK**.
7476

7577
![Screenshot of the Step 1 of 2: Generate API Access Token with the OK option called out.](media/smartsheet-provisioning-tutorial/Smartsheet07.png)
7678

77-
8. Copy the API Access Token and save it as this will be the only time you can view it. This is required in the **Secret Token** field in Azure AD.
79+
1. Copy the API Access Token and save it as this will be the only time you can view it. This is required in the **Secret Token** field in Azure AD.
7880

7981
![Smartsheet token](media/smartsheet-provisioning-tutorial/Smartsheet08.png)
8082

@@ -104,33 +106,33 @@ This section guides you through the steps to configure the Azure AD provisioning
104106

105107
1. Sign in to the [Azure portal](https://portal.azure.com). Select **Enterprise Applications**, then select **All applications**.
106108

107-
![Enterprise applications blade](common/enterprise-applications.png)
109+
![Screenshot of Enterprise applications blade.](common/enterprise-applications.png)
108110

109-
2. In the applications list, select **Smartsheet**.
111+
1. In the applications list, select **Smartsheet**.
110112

111-
![The Smartsheet link in the Applications list](common/all-applications.png)
113+
![Screenshot of The Smartsheet link in the Applications list.](common/all-applications.png)
112114

113-
3. Select the **Provisioning** tab.
115+
1. Select the **Provisioning** tab.
114116

115117
![Screenshot of the Manage options with the Provisioning option called out.](common/provisioning.png)
116118

117-
4. Set the **Provisioning Mode** to **Automatic**.
119+
1. Set the **Provisioning Mode** to **Automatic**.
118120

119121
![Screenshot of the Provisioning Mode dropdown list with the Automatic option called out.](common/provisioning-automatic.png)
120122

121-
5. Under the **Admin Credentials** section, input the **SCIM 2.0 base URL** of `https://scim.smartsheet.com/v2` and **Access Token** value retrieved earlier from Smartsheet in **Secret Token** respectively. Click **Test Connection** to ensure Azure AD can connect to Smartsheet. If the connection fails, ensure your Smartsheet account has SysAdmin permissions and try again.
123+
1. Under the **Admin Credentials** section, input the **SCIM 2.0 base URL** of `https://scim.smartsheet.com/v2` and **Access Token** value retrieved earlier from Smartsheet in **Secret Token** respectively. Click **Test Connection** to ensure Azure AD can connect to Smartsheet. If the connection fails, ensure your Smartsheet account has SysAdmin permissions and try again.
122124

123-
![Token](common/provisioning-testconnection-tenanturltoken.png)
125+
![Screenshot of Token.](common/provisioning-testconnection-tenanturltoken.png)
124126

125-
6. In the **Notification Email** field, enter the email address of a person or group who should receive the provisioning error notifications and check the checkbox - **Send an email notification when a failure occurs**.
127+
1. In the **Notification Email** field, enter the email address of a person or group who should receive the provisioning error notifications and check the checkbox - **Send an email notification when a failure occurs**.
126128

127-
![Notification Email](common/provisioning-notification-email.png)
129+
![Screenshot of Notification Email.](common/provisioning-notification-email.png)
128130

129-
7. Click **Save**.
131+
1. Click **Save**.
130132

131-
8. Under the **Mappings** section, select **Synchronize Azure Active Directory Users to Smartsheet**.
133+
1. Under the **Mappings** section, select **Synchronize Azure Active Directory Users to Smartsheet**.
132134

133-
9. Review the user attributes that are synchronized from Azure AD to Smartsheet in the **Attribute Mapping** section. The attributes selected as **Matching** properties are used to match the user accounts in Smartsheet for update operations. Select the **Save** button to commit any changes.
135+
1. Review the user attributes that are synchronized from Azure AD to Smartsheet in the **Attribute Mapping** section. The attributes selected as **Matching** properties are used to match the user accounts in Smartsheet for update operations. Select the **Save** button to commit any changes.
134136

135137
|Attribute|Type|Supported for filtering|
136138
|---|---|---|
@@ -151,28 +153,28 @@ This section guides you through the steps to configure the Azure AD provisioning
151153
|urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager|String|
152154

153155

154-
10. To configure scoping filters, refer to the following instructions provided in the [Scoping filter tutorial](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
156+
1. To configure scoping filters, refer to the following instructions provided in the [Scoping filter tutorial](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
155157

156-
11. To enable the Azure AD provisioning service for Smartsheet, change the **Provisioning Status** to **On** in the **Settings** section.
158+
1. To enable the Azure AD provisioning service for Smartsheet, change the **Provisioning Status** to **On** in the **Settings** section.
157159

158-
![Provisioning Status Toggled On](common/provisioning-toggle-on.png)
160+
![Screenshot of provisioning status toggled on.](common/provisioning-toggle-on.png)
159161

160-
12. Define the users and/or groups that you would like to provision to Smartsheet by choosing the desired values in **Scope** in the **Settings** section.
162+
1. Define the users and/or groups that you would like to provision to Smartsheet by choosing the desired values in **Scope** in the **Settings** section.
161163

162-
![Provisioning Scope](common/provisioning-scope.png)
164+
![Screenshot of provisioning scope.](common/provisioning-scope.png)
163165

164-
13. When you are ready to provision, click **Save**.
166+
1. When you are ready to provision, click **Save**.
165167

166-
![Saving Provisioning Configuration](common/provisioning-configuration-save.png)
168+
![Screenshot of saving provisioning configuration.](common/provisioning-configuration-save.png)
167169

168170
This operation starts the initial synchronization of all users and/or groups defined in **Scope** in the **Settings** section. The initial sync takes longer to perform than subsequent syncs, which occur approximately every 40 minutes as long as the Azure AD provisioning service is running.
169171

170172
## Step 6. Monitor your deployment
171173
Once you've configured provisioning, use the following resources to monitor your deployment:
172174

173-
1. Use the [provisioning logs](../reports-monitoring/concept-provisioning-logs.md) to determine which users have been provisioned successfully or unsuccessfully
174-
2. Check the [progress bar](../app-provisioning/application-provisioning-when-will-provisioning-finish-specific-user.md) to see the status of the provisioning cycle and how close it is to completion
175-
3. If the provisioning configuration seems to be in an unhealthy state, the application will go into quarantine. Learn more about quarantine states [here](../app-provisioning/application-provisioning-quarantine-status.md).
175+
* Use the [provisioning logs](../reports-monitoring/concept-provisioning-logs.md) to determine which users have been provisioned successfully or unsuccessfully
176+
* Check the [progress bar](../app-provisioning/application-provisioning-when-will-provisioning-finish-specific-user.md) to see the status of the provisioning cycle and how close it is to completion
177+
* If the provisioning configuration seems to be in an unhealthy state, the application will go into quarantine. Learn more about quarantine states [here](../app-provisioning/application-provisioning-quarantine-status.md).
176178

177179
## Connector limitations
178180

0 commit comments

Comments
 (0)