To add automatic user provisioning, you need to set up your Identity Access Management system (IAM) for IXON Cloud. This article goes into specifics on how you set up Microsoft Entra ID.

• Request a tenant URL and secret token
• Create and configure a new application

Request a tenant URL and secret token

We first need to provide you with a tenant URL and secret token that you will need later. To prepare these, we require some information form you.

1. Before you start, check the main article automatic user provisioning for preparation steps.
2. Contact us requesting a "tenant URL and secret token for SCIM Provisioning" and provide us the following information:
   • Your domain name(s) used in user (de)provisioning.
     • You can only submit domains that you have full control over.
     • If you wish to submit more than one (sub)domain, provide a list of your (sub)domains. Wildcards are not supported.
     • We'll need to verify that you're the owner of the submitted (sub)domains. That will be done in the next step.
   • Your IXON Cloud company name.
   • Your IXON Cloud company ID.
     • These can be found in the account menu in the top right corner in the IXON Cloud.
        
3. To verify that you're the owner of each submitted (sub)domain, we will provide you with an identification key. You'll need to add that identification key as a TXT record to each (sub)domains' DNS settings. Inform us once you have done so.
4. Please wait for us to verify your domain(s) and process your request. This may take several business days.
   • Due to the sensitive nature of the information, we will send the information securely and strongly recommend that you store them somewhere safe once received.

Create and configure a new application

Once you've received a tenant URL and secret token from us, you can proceed with the steps below.

5. Open Microsoft Azure and log in.
6. Search for and open the Microsoft Entra ID service.
7. In the left menu, under Manage, go to Enterprise applications.
8. Click on New application at the top and then on Create your own application in the top left corner.
9. Select and enter the following.

   Name	Enter a descriptive name. For example, "IXON Cloud".
   Purpose	Select Integrate any other application you don't find in the gallery (Non-gallery).

    
10. Click Create.

The application has been created. The next step is to configure the credentials.

11. You will automatically be redirected to your newly created Enterprise Application.
12. In the left menu, under Manage, go to Provisioning.
13. Click New configuration at the top.
14. Enter the tenant URL and secret token that you received from us.
      
15. Use Test connection to verify that everything is in order.
16. Click Create.

The base configuration is done. The next step is to create an attribute mapping.

17. In the left menu, under Manage, go to Attribute mapping (Preview).
18. Go to Provision Microsoft Entra ID Groups and set Enabled to No.
     
19. Save the configuration and then go back to Attribute mapping (Preview).
    • You may need to refresh to page to see the updated information.
20. Go to Provision Microsoft Entra ID Users.
21. Under Attribute Mappings, make sure the table matches the table below and delete any excessive rows.

    Target attribute	Source attribute	Mapping type	Match objects using this attribute	Matching precedence
    externalId	objectId	Direct	Yes	1
    userName	userPrincipalName	Direct	Yes	2
    displayName	displayName	Direct	No
    active	Switch([IsSoftDeleted], , "False", "True", "True", "False")	Expression	No

22. Save the configuration and then go back to Attribute mapping (Preview).
23. In the left menu, go to Users and groups.
24. Add all individual users or group(s) of users that you want to provision to IXON Cloud.

Most of the configuration is done. Before the last configuration step, test that it's configured correctly by provisioning a user.

25. In the left menu, go to Provision on demand.
26. Select one of the users that you added earlier and click on Provision.
    • You should see a message "User ... was created in ...", indicating that the test was successful. If you see a different message, please go over all the steps again and make sure they were followed and entered correctly.
27. Go to your user list the IXON Cloud, to Portal > Users or Admin > Users, and confirm that the user has been added. If that user already existed in your IXON Cloud company, it is not yet possible to see that they are managed by an IAM, like Microsoft Entra ID.

Now that most of the configuration is done and it's confirmed to be working, all that remains is to make it sync automatically.

28. In the left menu, under Manage, go to Provisioning.
29. Turn on Provisioning Status to enable automatic syncing with IXON Cloud.
    • Microsoft Entra ID has an automatic syncing interval with external systems, like IXON Cloud, that is fixed at 40 minutes and cannot be changed. This means that it may take up to 40 minutes before your changes in Microsoft Entra ID have been synced to IXON Cloud. If you do not wish to wait that long, you can manually sync with Provision on demand, as done earlier in this article.
30. We recommend that you enable e-mail notifications to be notified when a syncing failure occurs. This can be enabled under Settings.
31. Click Save.