What You'll Achieve
- ✅ New starters in Microsoft 365 will automatically get a TrainMeUK account
- ✅ When someone leaves, their TrainMeUK account will be disabled automatically
👤 Who Should Do This
A Microsoft 365 administrator with Global Admin or Application Admin rights.
🔄 Step-by-Step Setup
1. In TrainMeUK
- Go to Admin → System Settings → SCIM User Provisioning
- Toggle Enable SCIM on
- Copy the SCIM Endpoint URL
- Copy the SCIM Bearer Token (use the Copy button)
2. In Microsoft Entra ID
- Go to entra.microsoft.com → Enterprise applications
- Open the app you registered for TrainMeUK SSO
- Go to Provisioning → Get started
- Set Provisioning Mode to Automatic
- Paste the values from TrainMeUK:
- Tenant URL → SCIM Endpoint URL
- Secret Token → SCIM Bearer Token
- Click Test connection → it should say Success
- Click Save
3. Choose Who Syncs
- In the TrainMeUK app in Entra, go to Users and groups
- Add the groups or people who should get TrainMeUK accounts
- 💡 Tip: Most companies assign an "All Staff" group
4. Start Provisioning
- Go back to Provisioning
- Click Start provisioning
- Entra will now keep TrainMeUK automatically in sync with Microsoft 365
🧪 Test It
- Add a test user to the group you assigned
- Wait up to 40 minutes for sync (or force a sync in Provisioning)
- In TrainMeUK go to Admin → Manage Users
- The test user should appear ✅
💡 Troubleshooting
Test connection fails
Check the Endpoint URL and Token are copied exactly from TrainMeUK.
User doesn't appear
Confirm they're in the assigned group in Microsoft 365.
Wrong details syncing
Default attribute mappings (email, first name, last name) are already configured — you usually don't need to change them.
Why SCIM Provisioning Matters
Manual user management in training platforms creates bottlenecks and compliance risks. With SCIM (System for Cross-domain Identity Management), your user lifecycle becomes fully automated:
Automatic Onboarding
New employees get instant access to required training based on their role and department.
Secure Offboarding
When someone leaves, their access is immediately revoked, maintaining security.
Role-Based Access
Training assignments automatically adjust when roles change in Microsoft 365.
Compliance Assurance
No manual errors mean complete audit trails and consistent compliance coverage.
Best Practices for SCIM Setup
Pro Tips for Success
- Test with a small group first before rolling out to all users
- Use security groups rather than individual users for easier management
- Monitor the provisioning logs regularly to catch any sync issues early
- Set up notifications for failed provisioning attempts
- Document your group structure so other admins understand the setup
What Happens Next
Once SCIM provisioning is active, your training platform becomes a seamless extension of your Microsoft 365 environment. User changes in Entra ID automatically flow through to TrainMeUK, ensuring your compliance training coverage is always current and complete.
Ready to Get Started?
Our team can help you set up SCIM provisioning in under 30 minutes, with full support throughout the process.