MICROSOFT TEAMS APP AND AZURE
Setting up Azure
By using Microsoft Azure sync, you can effortlessly incorporate new team members and remove departing ones from Team Today through your standard onboarding procedures.
This is especially beneficial for bigger organisations where manually handling a large volume of new joiners and leavers could pose challenges.
Overview
You will need to contact us at support@team-today.com before proceeding with this to obtain an API Key and increase the limits placed on your account.
Enterprise Application Setup
- Set up an account in Team Today
Log in and complete the onboarding process.
- Visit Azure Enterprise App Marketplace
and add the Team Today Azure app
- Email the company Azure Tenant ID to support@team-today.com
Or Customers Azure Tenant ID if you are a reseller
- Team Today will then provide a secret API Key
- Open the Team Today Azure app
- Select "Provisioning" from the menu on the left
- Select "Automatic" from the dropdown menu
- Enter "https://scim.team-today.com/scim/v1" for the URL
- Enter the secret API key provided by Team Today
- Click on "Test connection" and if then if its working, SaveClick on overview on the menu to the left
- You can now click "Start" to run the provisioning
SKIM Integration - User Provisioning
- Click on “Provision Azure Active Directory Users” and set up the attributes as per the table below.
SCIM Settings
- Under “Settings” enter your email to be notified when provisioning fails.
- You can configure which users you want to config, under “Scope” by selecting “Sync only assigned users and groups” you will be able to explicitly select which users you want to be provisioned.
- This “Sync only assigned users and groups” setting is ideal for testing and initial setup.
Endpoints
Environment |
URL |
Test | https://test.scim.team-today.com/scim/v1 |
Prod | https://scim.team-today.com/scim/v1 |
SKIM Integration - Field mapping
The default field mappings based on `urn:ietf:params:scim:schemas:extension:enterprise:2.0:User` almost cover all required fields.
Team Today Attributes |
Matching precedence |
Notes |
userName |
1 |
Should be the user's primary email |
externalId |
2 |
User's unique ID (What Microsoft refer to as the ObjectID) |
active |
Boolean: true | false Is account active |
|
preferredLanguage |
active |
active |
name.givenName |
active |
active |
emails[type eq "work"].value |
active |
Users primary work email address |
urn:ietf:params:scim: schemas:extension: enterprise:2.0:User: department |
active |
Users department, this attribute is used to place the user into a team (or create a team if it does not exist). |
sendWelcomeEmail |
active |
(Default true)This is a boolean value and can be added as a constant. You will have to click on “edit attribute list” and add it before you can add a new mapping.Setting this value to false will suppress the welcome email, allowing you to manage that part of the onboarding internally. |
Example User Setup
Additional attributes can be added at request, this document will be updated as and when new attributes are integrated.
SKIM Integration -Limited rollout
Should you wish to roll out Team Today to a subset of users/groups this can be achieved with the following steps:
- Go to the Team Today SCIM application in Enterprise applications that you set up earlier
- Under “Manage” select the “Provisioning” blade
- Click on “Edit Provisioning”
- Click on “Settings”
- Change “Scope” to “Sync only assigned users and groups”
This will limit SCIM provisioning to explicitly selected users and groups. - Under “Mapping” click on “Provision Azure Active Directory Groups” and change the “Enabled” slider to “No”
You will now be able to start configuring the application to automatically provision users.
To select users and groups follow these following steps:
- Go to the Team Today SCIM application in Enterprise applications that you set up earlier
- Under “Manage” select “Users and groups”
- Click on “Add user/group”
- Select the users and/or groups you wish to be provisioning to Team Today.
Once done go back to Provisioning and start/restart provisioning.
Notes
By default there are hard limits enforced on how many users each account can have to ensure the integrity of the platform. Please contact us at support@team-today.com to have these lifted.
Workgroups cannot currently be provisioned. TeamAdmins and CompanyAdmins have the ability to create teams and workgroups and move people around.
We are looking at adding more mappings at the request of our customers.
Getting support
Simply contact support@team-today.com for onboarding advice.