Microsoft Entra ID SCIM (Sync members)
Let Microsoft Entra ID invite people to your Clakta team when they're assigned the app, and remove them when they're unassigned.
Directory sync lets Microsoft Entra ID manage who is on your Clakta team. When you add someone to the Clakta app in Entra ID, Clakta invites them to the team. When you remove or disable them, Clakta removes them. Directory sync is available on the Enterprise plan.
Set up SSO with Microsoft Entra ID first: directory sync uses the same enterprise application.
Create the connection in Clakta
- Go to Team settings → Security and click Configure under Directory sync (SCIM).
- Choose Microsoft Entra ID and click Create connection.
- Keep the dialog open: you'll copy the Tenant URL and the Secret token from it.
Turn on provisioning in Entra ID
- Open the Clakta enterprise application in the Microsoft Entra admin center.
- Go to Provisioning and set Provisioning Mode to Automatic.
- Under Admin Credentials, fill in:
- Tenant URL: the tenant URL from Clakta
- Secret Token: the secret token from Clakta
- Click Test Connection, then Save.
- Keep the default Mappings.
- Under Settings, set Scope to Sync only assigned users and groups.
- Set Provisioning Status to On and click Save.
The first sync can take 20 to 40 minutes. After that, Entra ID sends changes on its regular cycle.
What happens next
- People assigned to the app get an email inviting them to your Clakta team. With SSO on, they can also just sign in through SSO.
- People who are unassigned or disabled are removed from the team.
- Team owners are never removed by directory sync. Remove them by hand in Members if needed.
Common questions
Related articles
Single sign-on (SSO)
How SAML single sign-on works in Clakta, who can set it up, and how members sign in once it's on.
Set up SSO with Okta
Create a SAML app in Okta and connect it to Clakta so your team can sign in with their Okta account.
Set up SSO with Microsoft Entra ID
Create an enterprise application in Microsoft Entra ID and connect it to Clakta so your team can sign in with their Microsoft account.