Skip to main content
All CollectionsSingle Sign-On (SSO)
Automatically Sync Users Between Microsoft Entra and Productive with SCIM (Beta)
Automatically Sync Users Between Microsoft Entra and Productive with SCIM (Beta)

Set up SCIM with Microsoft Entra to automatically create, update, and remove users in Productive based on your identity management settings.

Updated yesterday

Managing user accounts manually can be time-consuming, especially as your team grows.

SCIM (System for Cross-domain Identity Management) automates user provisioning, ensuring that updates made in Microsoft Entra—such as adding or removing users—are automatically reflected in Productive.

This means:

  • When a new employee is added to Entra, they’re automatically created in Productive.

  • If an existing employee is updated in Entra, the changes are reflected in Productive.

  • If someone leaves the company, their Productive access is revoked.

SSO must be set up before enabling SCIM. Follow the steps in this article to configure SSO with Microsoft Entra.

Setting up SCIM in Microsoft Entra is available on the Ultimate subscription plan.


Enable SCIM with Microsoft Entra

Step 1: Create a New SCIM App in Entra

  1. In Microsoft Entra, go to Applications > Enterprise Applications and click New application.
    ​
    ​Note: You'll see a Productive gallery application, but it only supports SSO. Since Microsoft isn't accepting updates to it, you'll need to create a separate app for SCIM.
    ​

  2. Click Create your own application, enter a name (e.g., Productive SCIM), and select Integrate any other application you don’t find in the gallery (Non-gallery).
    ​

  3. Click Create.

Step 2: Enable SCIM in Productive

  1. In Productive, go to Settings > Single Sign-On > SCIM.
    ​

  2. Click Enable SCIM.
    ​

  3. Once enabled, you will see two key pieces of information. Keep this window open, as you will need to copy these values into Entra.
    ​

    • Base URL

    • Bearer Token

Step 3: Connect Entra to Productive

  1. In your newly created SCIM app in Entra, navigate to Provisioning and click New configuration.
    ​

  2. Copy the Base URL from Productive and paste it into Tenant URL in Entra.
    ​

  3. Copy the Bearer Token from Productive and paste it into Secret Token in Entra.
    ​

  4. Click Test Connection.
    ​

  5. Once the test is successful, click Create.

Step 4: Configure Attribute Mappings

  1. In your SCIM app, go to Provisioning > Mappings and select Provision Microsoft Entra ID Users.

  2. Scroll down to Attribute mappings and delete all mappings except for the following:

    • userName

    • active

    • emails[type eq "work"].value

    • name.givenName

    • name.familyName


    Your setup should look like this:
    ​

  3. Click Save.

  4. Disable Group Provisioning:

  • Go to Provisioning > Mappings and click Provision Microsoft Entra ID Groups.
    ​

  • Under Enabled, select No, and click Save.
    ​

Step 5: Enable Provisioning

  1. In Entra, go to Provisioning > Settings and under Provisioning Status, select On, and click Save.
    ​

    Optionally, enable email notifications for provisioning errors and select Save.
    ​

How Does This Work in Practice?

Once provisioning is enabled, Productive will automatically update its user list based on who is assigned to the SCIM app in Entra:

  • If a user is added to the SCIM app in Entra, they will be created in Productive.

  • If a user is removed from the SCIM app, they will lose access to Productive.

  • If user details are updated in Entra, their details will be updated in Productive.

  • ⏳ Updates can take up to 40 minutes to appear in Productive.

With SCIM, you reduce manual work and ensure that only the right people have access to Productive at all times.

Good to Know

1) Seats and SCIM Provisioning

Before syncing users, you must have enough available seats in Productive. If there aren’t enough, the user won’t be provisioned. To receive notifications about failed provisioning, enable email alerts in Entra.

2) User Types

Currently, all users created through SCIM are set as Employees. Future updates may introduce support for Contractors and Clients.

3) Default Permissions

New users provisioned via SCIM are automatically assigned the Staff permission set.

4) Cost Rates

Cost rates must be manually configured in Productive after a user is created.

5) User Management

SCIM ensures that users are created, updated, and removed in Productive based on changes in Entra. If a user’s name or email is updated in Entra, the change is reflected in Productive as well.

Related Articles
Editing User and Contact Details
Using Webhooks in Productive
Enabling SSO Using Microsoft Entra
User Management: Basic Overview
FAQs for Single Sign-On (SSO) and Logging In Using SSO
Did this answer your question?