You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/fundamentals/account/account-security/scim-setup/entra.mdx
+10-12Lines changed: 10 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,37 +13,35 @@ Once you have [gathered the required data](/fundamentals/account/account-securit
13
13
14
14
## Set up the Enterprise application
15
15
16
-
1. Go to the Entra admin center, select **Applications** > **Enterprise Applications**.
16
+
1. Go to the Entra admin center and select **Applications** > **Enterprise Applications**.
17
17
2. In the Microsoft Entra Gallery, select **New application** > **Create your own application**, then choose a name.
18
-
3. Select **"Integrate any other application you don't find in the gallery (Non-gallery)"**.
18
+
3. Select **Integrate any other application you don't find in the gallery (Non-gallery)**.
19
19
4.**Create** an application.
20
20
21
21
## Provision the Enterprise application
22
22
23
-
1. Inside the application just created, under **Manage**on the sidebar menu, select **Provisioning**.
24
-
2. Select **New configuration** and enter the **Tenant URL**: `https://api.cloudflare.com/client/v4/accounts/<Account_ID>/scim/v2`, replace`<Account_ID>` with your own account ID.
23
+
1. Inside the newly created application under **Manage**from the sidebar menu, select **Provisioning**.
24
+
2. Select **New configuration** and enter the **Tenant URL**: `https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/scim/v2`. Replace`<ACCOUNT_ID>` with your own account ID.
25
25
3. Paste the SCIM provisioning API token value as **Secret token**.
26
-
4. Select **Test Connection**, then **Save** the configuration.
26
+
4. Select **Test Connection** then **Save** the configuration.
27
27
28
-
## Configure user & group synchronization
28
+
## Configure user and group synchronization
29
29
30
-
1. Navigate to the application just created, under **Manage**on the sidebar menu, select **Users and groups**.
30
+
1. Navigate to the newly created application under **Manage**from the sidebar menu, select **Users and groups**.
31
31
2.[Assign users and groups to the application](https://learn.microsoft.com/entra/identity/enterprise-apps/assign-user-or-group-access-portal).
32
32
3. After the users are assigned, navigate to **Provisioning** on the sidebar menu and select **Start Provisioning**.
33
33
34
34
:::note
35
-
To successfully synchronize the group details into Cloudflare:
36
-
1. The `User Principal Name` (of `Identity`) and `Email` (of `Contact Information`) fields of each user must be identical (values are case-sensitive). Learn more about [how to create, invite, and delete users](https://learn.microsoft.com/entra/fundamentals/how-to-create-delete-users).
37
-
2. User Principal Name should only contain alphanumeric characters.
35
+
To successfully synchronize the group details into Cloudflare the `User Principal Name` (of `Identity`) and `Email` (of `Contact Information`) fields of each user must be identical. Values are case-sensitive, and the User Principal Name can only contain alphanumeric characters. Learn more about [how to create, invite, and delete users](https://learn.microsoft.com/entra/fundamentals/how-to-create-delete-users).
38
36
:::
39
37
40
-
3. To validate which users and groups have been synchronized, navigate to **Provisioning logs** on the sidebar menu. You can also [review the Cloudflare Audit Logs](/fundamentals/account/account-security/review-audit-logs/).
38
+
4. To validate which users and groups have been synchronized, navigate to **Provisioning logs** on the sidebar menu. You can also [review the Cloudflare Audit Logs](/fundamentals/account/account-security/review-audit-logs/).
41
39
42
40
:::caution[Read-only group]
43
41
If the Entra group shares the same name of an existing Cloudflare user group, the Cloudflare user group will become read-only after the provisioning.
44
42
:::
45
43
46
-
4. To grant permissions to users & groups at Cloudflare, refer to [Roles](/fundamentals/manage-members/roles/) and [Policies](/fundamentals/manage-members/policies/).
44
+
5. To grant permissions to users and groups at Cloudflare, refer to [Roles](/fundamentals/manage-members/roles/) and [Policies](/fundamentals/manage-members/policies/).
0 commit comments