This guide walks you through configuring Microsoft Entra to automatically provision users and Access Groups in Pinpoint.
Before you get started, please note:
Each user can only belong to one Access Group at a time.
Visibility settings must still be managed manually inside Pinpoint — either directly on a user, or at the Access Group level.
In Settings > Integrations, inside the “Apps” tab, add the SCIM integration. If users already exist in the instance, ensure you open the advanced configuration and check the ‘Disable automatic SCIM sync’ for now. If there are no users currently using the platform, you do not need to do this. Toggle the ‘Enable’ switch.
Over in Azure, go to your tenant and select ‘Enterprise applications’. Click ‘New application’.
Click on ‘Create your own application’
Enter the application name you desire (eg. ‘Pinpoint’) and select ‘Integrate any other application”
Once the application has been created, click on ‘Provisioning’ in the left hand side menu.
Click on ‘New configuration’
Enter the URL and token from the Pinpoint integrations page and click ‘Test connection’
You must suffix the URL with ?aadOptscim062020 to ensure Microsoft Entra compatibility - read here for more information: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/application-provisioning-config-problem-scim-compatibility#flags-to-alter-the-scim-behavior
You will then see a successful test connection message. Click ‘Create’.
Assign your desired groups or individuals to the application to provisioned them to Pinpoint.
The user has been provisioned to Pinpoint.
