A new standards-based option for identity teams to manage user and group lifecycle in Microsoft Entra.
Modern organizations rely on a growing ecosystem of applications, platforms, and services to run their business. Managing users and groups consistently across these systems is essential for security and operational efficiency. Many teams rely on the System for Cross-domain Identity Management (SCIM) standard to maintain predictable integrations, reduce custom provisioning work, and simplify lifecycle tasks across their environment.
Microsoft Entra has long supported SCIM‑based provisioning to SaaS applications and API‑driven inbound provisioning from HR systems. Today, we’re extending our support for standards‑based identity lifecycle automation by introducing Microsoft Entra SCIM 2.0 APIs, which allow external SCIM‑compatible identity sources to provision users and groups directly into Microsoft Entra. In this model, Microsoft Entra acts as the SCIM service provider (server), allowing external SCIM‑compatible clients—such as orchestration tools or custom automation frameworks—to provision and manage users and groups in Entra using standard SCIM operations. This is particularly valuable for customers who already use SCIM‑based automation frameworks or identity governance platforms and want to reuse their existing SCIM provisioning patterns when integrating with Microsoft Entra.
What you can do with Microsoft Entra SCIM 2.0 APIs
Microsoft Entra SCIM 2.0 APIs let identity teams, developers, and partners manage user and group lifecycle operations using a standards‑based approach that aligns with existing SCIM tooling.
With these APIs, you can:
- Provision and deprovision users in Microsoft Entra from HR systems, SaaS platforms, or custom applications.
- Update user attributes using the SCIM schema and supported extensions.
- Manage Microsoft Entra ID security groups and Microsoft 365 groups, including membership.
- Integrate with existing SCIM clients and automation frameworks, reusing established provisioning patterns.
- Discover supported schemas and capabilities through standard SCIM endpoints.
A common scenario is synchronizing users from an HR system into Microsoft Entra, mapping attributes using the SCIM schema, and managing group membership based on role or department. Teams already using SCIM for other SaaS integrations can extend those same patterns to Microsoft Entra with minimal changes.
Get started
Follow the Microsoft Learn documentation to enable SCIM APIs and begin integrating with your SCIM client.
Licensing model
The Microsoft Entra SCIM 2.0 APIs follow a consumption-based pricing model. Refer to the pricing page for eligibility and pricing details.
Learn more
The Microsoft Entra SCIM 2.0 APIs are now generally available in the Microsoft Entra public cloud and will be available in Microsoft Entra ID for US Government by the end of June 2026.
To explore Microsoft Entra SCIM 2.0 APIs in more detail, review the following resources on Microsoft Learn:
- SCIM API reference documentation including endpoints and permissions
- SCIM schema documentation with supported attributes and extensions
- SCIM 2.0 API provisioning pricing Web Page
-Joseph Dadzie
Vice President, Product Management
Additional resources
Learn more about Microsoft Entra
Prevent identity attacks, ensure least privilege access, unify access controls, and improve the experience for users with comprehensive identity and network access solutions across on-premises and clouds.
Microsoft