This article is meant to serve as a guide for you to switch from our Microsoft Entra ID Connector to SCIM User Provisioning and provide frequently asked questions you might come across.

Guide to Switch from Entra ID Connector to SCIM User Provisioning

Step 1: Configure SCIM

Navigate to our SCIM User Provisioning article for details on configuring iLMS to enable SCIM provisioning. We also include instructions for two identity providers (IdP), Microsoft Entra ID and Okta, but you should be able to use the instructions provided as a general guide for any IdP. 

SCIM User Provisioning

Step 2: Disable the Microsoft Entra ID Connector

1. Log in to iLMS
2. Navigate to Settings
3. Select Directory Services
4. Click Manage Microsoft Entra ID
5. Under Actions in the table, select the Edit icon (pencil)
6. On the Update Directory page, toggle to disable the connector
7. Click Save at the bottom of the screen

Frequently Asked Questions

What are the advantages of moving to SCIM User Provisioning over the Microsoft Entra ID Connector?

• Sync Manager/Supervisor Information
  • SCIM can synchronize the "manager" attribute for each user in Entra ID, linking an employee to their direct supervisor or manager
• Sync users from different Entra ID Groups
  • SCIM can synchronize group memberships from Entra ID, which organizes users into logical collections, such as by department, team, or access level
    • If you have groups created in Microsoft Entra ID, SCIM User Provisioning allows you to select users from specific groups to sync with iLMS; For example, if you have Groups A, B, and C created in Microsoft Entra ID, SCIM User Provisioning would allow you to sync users from only Group A or Group A and Group C
    • Create user groups in iLMS Entra ID Groups in iLMS (optional); For example, you can have Groups A and C automatically created as groups in iLMS, along with the users that you are syncing

Will there be any interruptions to my platform’s functionality during the switch to SCIM User Provisioning?

• No, there is no downtime or disruption during a switch from the Microsoft Entra ID Connector to SCIM User Provisioning

How long does the process typically take to switch from the Microsoft Entra ID Connector to SCIM User Provisioning?

• This depends on a few factors, but we suggest putting aside around 30 minutes 

What will happen if I decide to keep both Microsoft Entra ID and SCIM User Provisioning enabled together?

• This is not recommended. There is no benefit, and it may complicate future administrative tasks or troubleshooting

Why should I move from Microsoft Entra ID Connector to SCIM User Provisioning?

• Please see the first question above “What are the advantages of moving to SCIM User Provisioning over the Microsoft Entra ID Connector?”

What will be the impact on existing users in iLMS?

• If existing users' profiles are outdated, they will be updated in the sync process. Other than that, there will be no other impact

Is there a chance that users could be duplicated during the switch?

• No. iLMS ensures that no two users with the same Email ID / Employee ID (depending on your organization settings) exist in the system

What happens to users who are currently inactive in iLMS?

• SCIM will behave the same way as Entra ID Connector currently does and will set the user status according to what you have set in Entra ID. Therefore, if a user is inactive in Entra ID, it will remain inactive in iLMS; if you have users in iLMS that have not been created via a directory sync (such as Microsoft Entra ID Connector), those users will not be affected by the switch to SCIM User Provisioning 

Will this switch affect any user roles or permissions?

• No

Will my user groups be synchronized differently after the switch?

• The ability to sync user groups is a key benefit that SCIM User Provisioning offers over Microsoft Entra ID; however, syncing groups with SCIM User Provisioning is optional; if you choose to sync user groups, you may have additional groups available in iLMS

Will my users' training history and completion records be preserved?

• Yes 

Will I need to reassign any courses or training after switching connectors?

• No, SCIM is used for user provisioning only

Are there any limitations with SCIM that I should be aware of, compared to the Entra ID Connector?

• No, SCIM does everything that Microsoft Entra ID Connector does, and more 

Can I revert to the Microsoft Entra ID Connector if needed?

• Yes, for a limited amount of time, but this is not recommended. Any changes made to users or groups by SCIM User Provisioning will not be automatically reverted. With this release of SCIM User Provisioning, we will also soon deprecate our Microsoft Entra ID Connector. If you are currently using the Microsoft Entra ID Connector, you should make plans to switch to the new SCIM User Provisioning as soon as possible. If you have any questions or require assistance, please reach out to Technical Support.

How will I know the switch was successful?

• Microsoft Entra ID Provisioning Logs are a good way to verify how the sync is happening
  • Before looking at the provisioning logs, first check if the sync has been started or not:
    • Check the Last Cycle Start Time; initially, the Last Cycle Start Time will show Not Started, meaning the sync has not started yet
    • When the process has started/completed, the date will appear 
  • To access the Provisioning Logs:
    • Under Monitor on the left side, select Provisioning Logs
    • Details of each activity can be viewed by clicking on that activity