We recently implemented SCIM in our org to provision users and groups from Entra ID to Miro. Compared to other tools the SCIM implementation is quite unusua
- Support for creating and deleting teams
We’re provisioning our departments (which are groups in Entra ID) as teams in Miro. In our company we typically see 5-10 new departments or removal of existing departments per year. With the current SCIM implementation for groups we need to delete obsolete teams (departments) in Miro and create new ones manually in order for SCIM to sync the members. This seems counter intuitive for an automation such as SCIM. Our experience shows that manual steps are usually forgotten. The SCIM sync should hence support creating and deleting teams. - Modifyable team name
If the name of a group in Entra ID changes and is synced to Miro only the display name of the team is changed, not the team name itself. While there may be valid use cases for this behavior our company does not need the attribute display name. We always want the team name to reflect the Entra ID group name. As a compromise it would be valuable if admins could set the team name via SCIM.
-
externalId attribute for users and groups
Email addresses and group names are not immutable and change frequently, an ID does not. Hence it would be valuable to have a SCIM attribute “externalId” where we could write the Entra ID object ID. This attribute could henceforth be used as matching attribute. -
SCIM ID should be part of the CSV export of all teams
We were facing the challange that many of the 170 teams were renamed recently. This rename was not reflected in the display name of the teams which prevented us from matching them with Entra ID groups. As we did not find a reference connecting a team in the web GUI with a team in the SCIM API we had to open a support ticket to receive this data. This is basically the case for every company which has ever renamed a team, creating unnecessary work on our side and your side.
Besides that to us was not clear why teams have different IDs on the web and in the SCIM API.