Setup Guide
2025-09-02
10 min read
Auto-Provision Users from Microsoft 365 into TrainMeUK (SCIM)
Step-by-step guide to set up SCIM automatic user provisioning from Microsoft 365 to TrainMeUK for seamless user lifecycle management.
✅ What you'll achieve
When someone joins your company in Microsoft 365, they'll automatically get a TrainMeUK account. If they leave, their TrainMeUK account will be disabled too.
👤 Who should do this
A Microsoft 365 admin (Global or Application admin).
🔄 Step-by-step
1. In TrainMeUK
- Go to Admin → System Settings → SCIM User Provisioning
- Toggle Enable SCIM on
- Copy the SCIM Endpoint URL
- Copy the SCIM Bearer Token (use "Copy" button)
2. In Microsoft Entra ID
- Go to: entra.microsoft.com → Enterprise applications
- Open the app you registered for TrainMeUK SSO
- Go to Provisioning → Get started
- Set Provisioning Mode to Automatic
- Paste the values from TrainMeUK:
- Tenant URL → SCIM Endpoint URL
- Secret Token → SCIM Bearer Token
- Click Test connection → it should say "Success"
- Click Save
3. Choose who syncs
- In the TrainMeUK app in Entra, go to Users and groups
- Add the groups or people who should have TrainMeUK accounts
- Tip: most companies assign an "All Staff" group
4. Start provisioning
- Back in Provisioning, click Start provisioning
- Entra will now automatically keep TrainMeUK in sync with Microsoft 365
🧪 Test it
- Add a test user to the group you assigned
- Wait up to 40 minutes for sync (or force a sync in Provisioning)
- Check TrainMeUK → Admin → Manage Users — the user should appear ✅
💡 If something breaks
- Test connection fails → make sure the Endpoint URL and Token are copied exactly from TrainMeUK
- User doesn't appear → confirm they're in the assigned group in Microsoft 365
- Wrong details → the default attribute mappings already send email, first name, and last name. You shouldn't need to change them.