• You will first need to login to the Azure Portal. Once logged in, navigate to Azure Active Directory > App Registrations > New Registration to create a new Azure Active Directory Application.

• Enter Name, and select Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant). Then in Redirect URI (optional), select Web and enter the following URL:

https://login.puredome.com/oauth2/callback

• Under the Overview > Essentials section, note the Application (client) ID and the Directory (tenant) ID. These will be used respectively as the Client ID value and to construct the Issuer URL value in your PureDome Identity provider configuration.

• Now, you need to create a new Azure AD application secret. Navigate to Azure Active Directory > App Registrations > {Your Application - in our case PureDome} > Certificates & secrets > New client secret to create a new Azure AD application client secret. Copy this Value ID into a text file for later use. 

• The Microsoft URL may diff across national clouds, so you will need to review the Microsoft documentation to ensure you have the correct URL for your region. For the Microsoft global Azure AD service, the URL is as follows, where {tenantId} is the Directory (tenant) ID previously noted while creating our Azure AD Application.

https://login.microsoftonline.com/{tenantId}/v2.0

• In the application, go to Users and groups, and click + Add user/group. Choose who should have access, and click Assign.

• Now, you can head to the PureDome console on your browser, and navigate to Preferences and Single Sign-On. By choosing Azure you will be asked to enter four values as follows:
  
  
  1. IDP Name: Any name you want
  2. Client ID: Value copied from Microsoft Azure dashboard 
  3. IDP Client Secret: Value copied from Microsoft Azure dashboard (Value ID)
  4. Issuer URL: URL created in Step 3 (Configuring the Issuer URL)

• After completing all the steps above, you have successfully set up an OIDC application on your Microsoft 365/ Azure Active Directory (Azure AD) with SSO enabled for PureDome.

• After enabling SCIM, you will find the SCIM Base URL and OAuth Bearer Token values in their respective tabs. Be sure to copy these values for future use.

• In the SCIM section, you’ll also see options for auto-assigning and auto-purchasing licenses. If you’d like, go ahead and enable those features!

• Start by logging into the Azure Portal. Then, go to Applications > Enterprise applications and select New application.

• On the next screen, click Create your own application.

• Give your application a name, and then select Integrate any other application you don't find in the gallery (Non-gallery).

• Once the application is set up, go to the Provisioning section.

• Under Provisioning, select Get started.

• Set Provisioning Mode to Automatic. Then, under Admin Credentials > Tenant URL and Secret Token, enter the values you can find in the PureDome console once you activate SCIM integration under the SCIM Base URL and OAuth Bearer Token tab. Enter the value from the PureDome SCIM Base URL in the Tenant URL field and the value from the PureDome OAuth Bearer Token in the Secret Token field. Finally, click Test Connection. 

• You'll see a message saying the connection is successful. After that, click Save. Your SCIM integration is now set up. Next, you need to assign the SCIM application to users and groups

• Go to Groups > All groups and create a New group. Give your group a name and add users to it.

• Once you've created a group, go to the provisioning page of your application and click Edit provisioning.

• In the mappings section, select Provision Microsoft Entra ID Group and Provision Microsoft Entra ID Users.

• Set Enabled to No and click Save. 

• The final step is to assign the SCIM application to the group you just created. To do this, return to Applications > Enterprise applications, select your application, and click Assign users and groups. Once you've linked the application from Azure to either specific users or groups, return to the PureDome console. You'll see a list of users with the status "Inactive." Choose the users you want to give licenses to. Then, click Assign License to apply for the licenses.

• Or if you aim to sync an entire Azure group to PureDome as a team, remember to add it under the Users and Groups tab as well.