Rocketlane now supports SCIM-based user provisioning via Microsoft Entra ID (formerly Azure Active Directory). This integration helps automate user creation, updates, and deactivation, so your IT team no longer has to manage users manually in Rocketlane.

With this in place, Rocketlane mirrors user changes from Entra, streamlining identity and access management for growing teams.

Overview of SCIM Provisioning Capabilities

Once enabled, SCIM-based provisioning automatically handles:

• User Creation: Users assigned to the Rocketlane app in Entra are created in Rocketlane.
• User Updates: Updates to user attributes, such as name or email, in Entra are synced to Rocketlane.
• User Deactivation: Unassigned users in Entra are disabled or removed in Rocketlane.

Step 1: Set Up the Rocketlane Application in Entra ID

1. Log in to your Entra Admin Center.
   
2. Navigate to Enterprise apps > All Application > New Application > Create your own application.
   
3. Name the app, for example, Rocketlane.
4. Choose “Integrate any other application you don’t find in the gallery (Non-gallery)” and click Create.
   

Step 2: Generate API Token in Rocketlane

To connect Entra with Rocketlane, you’ll need an API token that authorizes SCIM operations.

1. Go to Settings in your Rocketlane account.
   
2. Scroll to API Settings.
   
3. Click Create API Key.
   
4. Name the key clearly, for example, Entra SCIM Integration.
   
5. Copy the generated API key. You’ll use this in the Entra setup.
   

Step 3: Configure SCIM Provisioning in Entra

1. Go to the Rocketlane application in Entra. Navigate to Provisioning > Get Started.
   
2. Fill in the following fields:
   • Provisioning Mode: Automatic
   • Authentication Method: Bearer Authentication
   • Tenant URL:
     https://<your-subdomain>.api.rocketlane.com/api/scim/v2
   • Example: If your Rocketlane domain is acme.rocketlane.com, the SCIM Base URL would be https://acme.api.rocketlane.com/api/scim/v2
   • Secret Token: Paste the API key you generated from Rocketlane.
3. Click Test Connection to verify.
   
4. On success, click Save to confirm and enable the integration.
   

Step 4: Configure Microsoft Entra ID Mapping

1. After saving the configuration, you should be able to see the option to configure attribute mapping.
   
2. Disable Provision Microsoft Entra ID Groups.
   
3. Configure Provision Microsoft Entra ID User’s Attribute Mapping so that it looks like the figure below.
   
4. Make sure Provision Microsoft Entra ID Users is enabled and Target Object Actions has Create, Update, and Delete enabled as well. Once done, click Save.
   
5. Turn Provisioning Status to On and click Save.
   

Step 5: Enable SCIM in Rocketlane

1. Log in to your Rocketlane instance.
2. Navigate to Settings > SCIM.
3. Click Set up SCIM integration.
4. Under Choose Integration, select AzureAD.
   
5. Set a Default Role and Permission Set.
   • Recommendation: Choose the lowest-privilege role and permissions to avoid giving unnecessary access by default.
6. Click Enable. Once enabled, provisioning actions from Entra ID will begin syncing with Rocketlane.

Step 6: Test the Integration

After enabling SCIM, verify that provisioning is working correctly:

• Assign a user in Entra ID to the Rocketlane application.
• Confirm that the user is created in Rocketlane.
• Update user details, such as email or name, in Entra and check that changes reflect in Rocketlane.
• Unassign or deactivate a user in Entra and verify that the user is deactivated in Rocketlane.