Azure configuration settings
SCIM Integration Settings
If your company uses the Team Today SCIM integration with Microsoft Azure (Entra ID), users are automatically provisioned into Team Today from your Active Directory. Starters are added, leavers lose access, and users are placed into teams, workgroups and departments, all without manual admin.
The settings below control how Team Today handles users who arrive via SCIM. You'll find them in Settings > Company settings > Azure configuration, under "SCIM Integration Settings". In Microsoft Teams, use the Management tab. Only company admins can change them.
A change saves as soon as you switch the setting, and applies to users provisioned from then on. Users who are already in Team Today are not changed.
Restrict manual allocation of users to departments
When enabled, users cannot be manually added to or moved between departments within Team Today, and trying to change a user's department shows an error. Department membership is managed entirely by your SCIM provisioning from Active Directory.
When disabled, admins can assign users to departments manually within Team Today. If Entra sends a department for a user, the next sync replaces the manual choice.
Recommended: Enable this if your users are provisioned into departments via SCIM. It keeps Active Directory as the single source of truth and prevents manual changes in Team Today from drifting out of sync with your directory.
Send welcome email to newly provisioned users
When enabled, every newly provisioned user gets a welcome email introducing them to Team Today, as long as:
- the user has access to Team Today (see the next setting). Team Today doesn't email users who can't sign in.
- Entra sends sendWelcomeEmail as true for the user. If this attribute isn't mapped, no welcome emails are sent. See the field mapping in Sync Team Today to Active Directory (SCIM).
Users created while this setting is on are also signed up for the weekly email reminder to set their whereabouts. Reminder emails are only sent if your company sends reminders, and only on paid plans and free trials.
When disabled, new users are still created in Team Today, but no welcome email is sent and they are not signed up for reminder emails. They won't get reminder emails until they turn on Email reminder in their Personal preferences, even if you enable this setting later.
Recommended: Keep this off while you are setting up and testing your Azure integration: this avoids emailing your whole organisation during a test run. Once initial setup and testing is complete, enable it so new starters are introduced to Team Today automatically.
Allow newly provisioned users access to Team Today
When enabled, newly provisioned users can sign in to Team Today as soon as they are created.
When disabled, users are still provisioned into Team Today (so your teams, offices and departments stay up to date), but they cannot sign in yet, and Team Today doesn't send them any emails. This lets you build up your user base silently before launch.
Enabling this setting later doesn't change users who were provisioned while it was off. An admin needs to give each of them access: go to Settings > Manage current users, open the user and switch on Access to Team Today.
Recommended: Keep this off during initial Azure setup and testing, then enable it when you're ready for your organisation to start using Team Today.
A typical rollout
- Set up the integration: follow Sync Team Today to Active Directory (SCIM), including the sendWelcomeEmail mapping if you want welcome emails. Keep welcome emails and user access disabled.
- Test: provision a small test group ("Provision on demand" in Entra works well) and confirm users, departments and teams look right in Team Today.
- Go live: enable Send welcome email to newly provisioned users and Allow newly provisioned users access to Team Today. New starters will now be onboarded automatically.
- Let your test users in: users provisioned during testing still can't sign in. Switch on Access to Team Today for each of them. They won't get a welcome email or reminder emails automatically, so tell them Team Today is ready and ask them to turn on Email reminder if they want reminders.
If you have any questions, contact us at support@team-today.com.