Question about setting up AAD to automatically provision users in Remedyforce (Salesforce)

%3CLINGO-SUB%20id%3D%22lingo-sub-136611%22%20slang%3D%22en-US%22%3EQuestion%20about%20setting%20up%20AAD%20to%20automatically%20provision%20users%20in%20Remedyforce%20(Salesforce)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-136611%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3EI%20have%20configured%20Azure%20AD%20to%20allow%20single%20sign-on%20to%20Remedyforce%20(Salesforce).%20This%20is%20working%20great.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20now%20want%20to%20enable%20automatic%20account%20provisioning.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOn%20the%20application%20page%2C%20the%20option%20says%20configure%20account%20provisioning%20which%20indicates%20that%20you%20are%20setting%20up%20account%20provisioning.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AADSalesforce.PNG%22%20style%3D%22width%3A%20712px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F25517i4E2523A09094A6B4%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AADSalesforce.PNG%22%20alt%3D%22AADSalesforce.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EWhen%20you%20go%20through%20the%20steps%2C%20it%20suggests%20that%20the%20user%20accounts%20in%20AAD%20will%20be%20provisioned%20in%20Salesforce.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AADSalesforce2.PNG%22%20style%3D%22width%3A%20613px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F25518iAA3235AA98DC71D5%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AADSalesforce2.PNG%22%20alt%3D%22AADSalesforce2.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3ECan%20someone%20explain%20what%20the%20configure%20account%20provisioning%20step%20actually%20does.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-136611%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-137455%22%20slang%3D%22en-US%22%3ERe%3A%20Question%20about%20setting%20up%20AAD%20to%20automatically%20provision%20users%20in%20Remedyforce%20(Salesforce)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-137455%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Michael%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIs%20it%20right%20to%20say%20the%20Configure%20account%20provisioning%20sets%20up%20AAD%20to%20talk%20to%20the%20service%20provider%20and%20no%20accounts%20will%20be%20synced%20until%20the%20Assign%20Accounts%20step%20is%20completed%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMark%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-137057%22%20slang%3D%22en-US%22%3ERe%3A%20Question%20about%20setting%20up%20AAD%20to%20automatically%20provision%20users%20in%20Remedyforce%20(Salesforce)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-137057%22%20slang%3D%22en-US%22%3E%3CP%3EMark%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20account%20provisioning%20process%20refers%20to%20a%20relationship%20between%20Azure%20AD%20and%20a%20third%20party%20application%2FService%20Provider%20such%20as%20Salesforce%20or%20Google%20Apps%20where%20Azure%20AD%20can%20provision%20user%20accounts%20and%20groups%20in%20the%20third%20party%20application.%20The%20process%20uses%20a%20protocol%20called%20SCIM%20and%20requires%20both%20parties%20to%20be%20licensed%20appropriately%20and%20configured%20to%20support%20this%20process.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMicrosoft%20documentation%20is%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Factive-directory-scim-provisioning%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Factive-directory-scim-provisioning%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%2C%3C%2FP%3E%0A%3CP%3EMichael%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi,

I have configured Azure AD to allow single sign-on to Remedyforce (Salesforce). This is working great.

 

I now want to enable automatic account provisioning. 

On the application page, the option says configure account provisioning which indicates that you are setting up account provisioning.

AADSalesforce.PNG

When you go through the steps, it suggests that the user accounts in AAD will be provisioned in Salesforce.

 

AADSalesforce2.PNG

Can someone explain what the configure account provisioning step actually does.

2 Replies

Mark,

 

The account provisioning process refers to a relationship between Azure AD and a third party application/Service Provider such as Salesforce or Google Apps where Azure AD can provision user accounts and groups in the third party application. The process uses a protocol called SCIM and requires both parties to be licensed appropriately and configured to support this process. 

 

Microsoft documentation is here: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-scim-provisioning

 

Best,

Michael 

Hi Michael,

 

Is it right to say the Configure account provisioning sets up AAD to talk to the service provider and no accounts will be synced until the Assign Accounts step is completed?

 

Regards 

 

Mark