> For the complete documentation index, see [llms.txt](https://docs.trustlogix.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.trustlogix.io/integrations/single-sign-on/azure-active-directory-ms-entra/user-provisioning-from-azure-ad.md).

# User Provisioning from Azure AD

### Enable User Provisioning

To enable automatic user provisioning from Azure AD to TrustLogix, follow these steps:

#### Step 1: Enable Auto Provisioning in TrustLogix

1. Navigate to existing Azure AD SSO Integration item. 
2. Click the **Enable Auto Provisioning** button in TrustLogix.
3. TrustLogix will generate a **SCIM URL** and a **Bearer Token**.
4. Copy the **SCIM URL** and **Bearer Token** for use in Azure AD.

#### Step 2: Configure Provisioning in Azure AD

1. Navigate to **Provisioning** under **Manage** in the Azure AD application (This could be the same SSO application created in Azure AD for TrustLogix Integration).
2. Click on "New Configuration" button <img src="/files/2gjDkLb8RspFq8F578hg" alt="" data-size="line">.
3. Configure the connection using the details from TrustLogix Console:
   * **Tenant URL (SCIM URL)**&#x20;
   * **Secret token (SCIM Token)** (prefix with `Bearer` , e.g., `Bearer eyJhbGciOiJIUzUxMiJ9.eyJzdW***`)
   * Disable the Groups Provision check box under the Mappings <img src="/files/FnYS3mjSB2QQLfcelwLg" alt="" data-size="original">
4. Test the connection.
5. After a successful connection, create the provisioning setup.
6. Navigate to **Users and Groups** and assign the users or groups to TrustLogix SSO Application.

#### Step 3: Start Provisioning

1. Go to **Overview (Preview)** in Azure AD.
2. Click **Start Provisioning**.
3. User provisioning occurs every **40 minutes** for newly assigned users.

***

### Notes

* If **Auto User Provisioning is disabled**, customers must manually create users in TrustLogix with their Azure AD email ID and assign roles.
* If **Auto User Provisioning is enabled**, new users or groups assigned in Azure AD will be automatically created in TrustLogix **without roles**.
* A **Super Admin** must manually assign TrustLogix roles to newly provisioned users.

By following these steps, TrustLogix will be successfully integrated with Azure AD for SSO and automatic user provisioning.

### References

* Regenerate SCIM token on expiration: <https://docs.trustlogix.io/integrations/single-sign-on/generate-scim-token>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.trustlogix.io/integrations/single-sign-on/azure-active-directory-ms-entra/user-provisioning-from-azure-ad.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.