SCIM (System for Cross-domain Identity Management) makes it easy to automatically create and update users in Tapt using Microsoft Entra ID (formerly Azure AD).
Once configured, user information stays in sync between Microsoft Entra ID and Tapt, helping you save time and reduce manual updates.
Before you begin:
You'll need access to both:
A Tapt Admin account.
A Microsoft Entra ID (Azure AD) administrator account.
What SCIM Supports
Tapt currently supports:
Automatically provisioning one or more users and their Tapt profiles.
Automatically updating supported user profile details.
Setup
Step 1: Create the Tapt Application in Microsoft Entra ID
Sign in to portal.azure.com.
Search for Enterprise Applications.
Click Create your own application.
Enter an application name, for example Tapt Integration.
Select Integrate any other application you don't find in the gallery.
Click Create.
Step 2: Configure User Provisioning
In Microsoft Entra ID
Open your new Enterprise Application.
Select Provisioning from the left-hand menu.
Set Provisioning Mode to Automatic.
You'll now see fields for:
Tenant URL
Secret Token
You'll get these from your Tapt Dashboard next.
In Tapt
Open your Tapt Dashboard in a new browser tab.
Go to Integrations.
Find Microsoft Entra ID and click Configure.
Click Generate Token.
Copy both the:
Tenant URL
Secret Token
Back in Microsoft Entra ID
Paste the Tenant URL and Secret Token into the matching fields.
Click Test Connection.
Once the connection is successful, click Save.
You're all set! Tapt and Microsoft Entra ID are now connected.
Note: Secret tokens are valid for 12 months. If your token expires, simply generate a new one in Tapt and update it in Microsoft Entra ID.
Step 3: Disable Group Provisioning
Tapt currently provisions users only.
In Provisioning, expand Mappings.
Select Provision Active Directory Groups.
Set Enabled to No.
Click Save.
Step 4: Choose Which Users to Provision
Return to your application's main page.
Select Users and Groups.
Click Add user/group.
Select the users and/or groups you'd like to provision.
Step 5: Turn Provisioning On
Return to Provisioning.
Confirm that Provisioning Status is set to On.
That's it! Microsoft Entra ID will now automatically provision users to Tapt.
Note: Microsoft Entra ID syncs with Tapt approximately every 40 minutes, so changes may not appear immediately.
What Happens When You Add a User?
When a user is assigned to your Tapt application in Microsoft Entra ID:
A new user is created in your Tapt Dashboard.
A Tapt profile is automatically created.
Supported profile information is imported from Microsoft Entra ID.
Future updates to supported fields will continue to sync automatically.
How Tapt identifies new users:
Tapt uses the user's email address as the unique identifier. If the email doesn't already exist in your Tapt account, a new profile will be created automatically.
Supported User Attributes
Tapt can sync the following Microsoft Entra ID attributes:
First name
Last name
Job title
Company name
Office phone
Mobile phone
Email address
Sync the Company Name
If you'd like to sync the Company Name field:
Go to Provisioning.
Open Mappings.
Select Provision Microsoft Entra Users.
Add a new mapping connecting to the User.organization attribute
Once saved, the Company Name field will sync to Tapt.
Important Notes
SCIM syncs supported user information automatically after setup.
User provisioning runs approximately every 40 minutes.
Secret tokens expire every 6 months and can be regenerated at any time.
Although Tapt supports profile image syncing via SCIM, Microsoft Entra ID does not expose profile images through SCIM. Profile photos must be uploaded manually by either:
The card owner, or
A Tapt Team Admin.
If something doesn't look right after setup, double-check your provisioning settings and allow enough time for the next sync to run. If you're still having trouble, our support team is here to help.