Skip to main content
SCIM (the system for cross-domain identity management) lets Entra synchronize user data with Gumloop through recurring communication: Gumloop periodically receives updates about the users that should have access, and uses them to provision or deprovision users — or simply update data about a user (e.g., a first name). See SSO, SAML & SCIM.
Entra’s SCIM implementation has many unresolved issues. (See here for a known subset.) In rare cases, Entra’s unusual behavior may result in an unsuccessful integration. Please contact support@gumloop.com if you encounter unexpected behavior.
Connecting Entra to Gumloop requires sharing two pieces of information with Entra, both of which come from Gumloop:
  1. A base URL that Entra will perform operations on (e.g. via HTTP PATCH)
  2. A bearer token that Entra will include with its requests
When Entra has both of those pieces of information, the connection is complete. No additional Gumloop-side configuration is necessary. With that said, configuration within Entra can be somewhat involved.

​
Before you start: get your base URL and bearer token from Gumloop

SCIM is an Enterprise add-on — a Gumloop organization admin requests enablement via support@gumloop.com, then generates a setup link at gumloop.com/settings/organization/sso. The setup page shows your SCIM base URL and lets you generate the bearer token.
Gumloop does not store bearer tokens — the token is shown once, at generation time. You can generate a new one at any time, which immediately invalidates the previous token.

​
Configuring Entra

Start at the Entra home page. Navigate to enterprise applications in the navigation bar.

Visiting enterprise applications in Entra

You’ll now see a list of applications. In this case, we have just one: test_application. Click the blue text to see more details about the application.
If the relevant application does not exist, you may benefit from reading the SAML with Entra guide on creating an enterprise application.

Opening the application in Entra

You’ll see an Overview page. Click on the menu item labeled Provisioning on the left.

Navigating to Provisioning in Entra

This will take you to a new menu. Look toward the top/center of the page for a button with a plus icon labeled New configuration. Click this.

Selecting New configuration in Entra

You’ll land on a page with a few data input options. Start with the field labeled Tenant URL. This is what Gumloop calls the base URL — the location where Entra will send its SCIM communications. Copy this value from your Gumloop SCIM setup page and paste it here. It should look something like the below:

Pasting Gumloop's base URL as the Tenant URL in Entra

Next, look at the field labeled Secret token directly below the Tenant URL. This is the other value that Gumloop provides: the bearer token. Paste it into Entra as the Secret token. The Secret token is sensitive. Please treat it like a password. Do not share it.

Pasting the Secret token in Entra

In Entra, you need to click Test connection to move on. Click this button and wait a moment.

Clicking Test connection in Entra

Once it’s clickable, hit Create in the lower left.

Pressing the Create button in Entra

You’ll land on a new page showing an overview of the Entra application. Find the Users and groups button in the left navbar and click it.

Visiting Users and groups in Entra

We need to assign users and/or groups to the application. Start by clicking the Add user/group button toward the top/center of the page. It’s marked with a plus icon.

Hitting Add user/group in Entra

Exactly what you’ll see might vary here, but you’ll see a searchable list of users and/or groups. Decide which users should have access to the application, select each, and then press Select in the lower left.

Selecting users and/or groups to add to the application

You’ll see another menu. If you’re content with your selection, press the Assign button in the lower left. Entra will now consider those users and/or groups to be assigned to the application.

Assigning a selection of users and/or groups to the application

Entra will not yet have begun SCIM provisioning. To get Entra to begin SCIM provisioning, press the Overview button in the left navbar.

Returning to the application's Overview

Press the Start provisioning button. It has a play button icon — kind of like you’d see on a remote control. Within a few moments, you’ll see a pop-up in the top right. It will say Provisioning is scheduled to start. This means that Entra has successfully begun its communications with Gumloop.

Provisioning started in Entra

​
Enabling synchronization in Gumloop

Provisioned users only reach your organization once synchronization is enabled on the Gumloop side. A Gumloop organization admin returns to gumloop.com/settings/organization/sso, selects the SCIM directory, and enables synchronization — see Setting Up SCIM. Once enabled, configuration is complete: assigned users appear in your organization’s member list after the next sync (automatic every 15 minutes, or triggered manually by the admin).