Provisioning

The Provisioning tab on the Authentication page provides an option to enable SCIM (System for Cross-domain Identity Management) Provisioning:

You can configure your company account in Micromine Nexus Cloud Licensing so that users and user groups are provisioned and deprovisioned by an external identity provider (IdP) such as Okta, Microsoft Entra ID or JumpCloud, using the System for Cross-domain Identity Management (SCIM) protocol.

  • Provisioning - the identity provider pushes users and user groups to Micromine Nexus Cloud Licensing.

  • Deprovisioning - the identity provider instructs Micromine Nexus Cloud Licensing to remove users and groups from a company account.

     

Configure SCIM provisioning with Microsoft Entra ID

The following describes how to configure SCIM provisioning between Microsoft Entra ID and Micromine Nexus Cloud Licensing (Nexus Cloud Licensing).

Configuration is completed in two stages:

  1. Collect the SCIM URL and token from Nexus Cloud Licensing; then,

  2. Use the URL and token to set up provisioning in Microsoft Entra ID.

     

Before you begin

Ensure,

  • You can sign in to Nexus Cloud Licensing as an administrator of your company account.

  • You have permission in Microsoft Entra ID to create and configure enterprise applications.

     

Important: Users who were invited to Nexus Cloud Licensing manually are matched to SCIM-provisioned users by email address and are synchronised automatically. Groups are not matched this way: A group in Microsoft Entra ID that has the same name as an existing team in Nexus Cloud Licensing causes a conflict during synchronisation.
 
Remove any duplicate group names in Microsoft Entra ID before you enable SCIM provisioning.
 

Get the SCIM URL and SCIM token

To enable SCIM provisioning in Nexus Cloud Licensing, from the Authentication page on the Provisioning tab,

  1. Set the Provisioning option to ON so that your identity provider can provision and deprovision users and groups for your company, and,

  2. Click Save Changes in the prompt.

    The Provisioning page will display the URL and the SCIM token

  1. Select the Copy icon to copy the SCIM URL and the SCIM token.. You use both values when you configure provisioning in Microsoft Entra ID.

    Important: Save both these values for later steps in this process.

    Note: The SCIM token grants access to your company account. Store it securely and do not share it. If it is exposed, Generate a new token and update the configuration in Microsoft Entra ID.

     

Configure SCIM provisioning in Microsoft Entra ID

The following steps should be completed in the Azure portal.

  1. Sign in to the Azure portal.

  2. Go to Microsoft Entra ID > Enterprise applications, and then select + New application.

  3. Select + Create your own application.

    From the panel at the right,

  4. Enter a unique name for the application, for example Micromine Nexus Cloud Licensing Provisioning

  5. Select Integrate any other application you don’t find in the gallery (Non-gallery), and then,

  6. Select Create.

In the new enterprise application,

  1. Go to Users and groups and add the users and groups that you want to provision to Nexus Cloud Licensing.

  2. Go to Provisioning > Overview, and then,

  3. Select New configuration.

  4. Set the following fields:

    • Tenant URL- the SCIM URL you copied earlier .

    • Secret Token - the SCIM token you copied earlier.

  5. Select Test Connection to confirm that Microsoft Entra ID can reach Nexus Cloud Licensing:

  6. Select Create at the bottom left of the window to save the configuration.

On the Overview page,

  1. Select Start provisioning, then,

  2. Select Yes in the confirmation dialog.

    Microsoft Entra ID begins provisioning and deprovisioning users and groups in Nexus Cloud Licensing.

Note: The initial provisioning cycle usually starts immediately, but the duration of the cycle depends on the number of users and groups in scope. After that, Microsoft Entra ID runs an incremental cycle approximately every 40 minutes, so later changes in Microsoft Entra ID can take up to that long to appear in Nexus Cloud Licensing. You do not have to wait for the next cycle:

  • To run a cycle for everyone in scope, select Pause provisioning and then Start provisioning. Avoid Restart provisioning since it re-evaluates every user and group instead of only the changes since the last cycle.

  1. Confirm that synchronisation succeeded.

    The Azure portal reports the number of synchronised users and groups, with no errors or warnings, and the same users and groups appear in Nexus Cloud Licensing.

SSO Configuration