How to Replace Your SCIM Token - Microsoft Entra

To help ensure a smooth transition with minimal interruption, follow the steps below to rotate your existing NINJIO SCIM token and update the provisioning connection in Microsoft Entra ID.

We recommend completing these steps during a planned maintenance window and securely storing the new token once it is generated.

Step 1: Pause provisioning in Microsoft Entra ID

• Step 1: Sign in to Microsoft Entra ID using an administrator account.

  

• Step 2: Open the Enterprise Application to locate your NINJIO SCIM Application.

• Step 3: Select Provisioning.

• Step 4: Select Pause provisioning, and keep provisioning paused while you complete the remaining steps.

• Step 5: Notify NINJIO Support once provisioning is paused in your Entra application.

Step 2: Preparing your Active Launch group with NINJIO Support Assistance

• Step 1: Once notified, NINJIO Support will send the new SCIM token through an approved secure channel.
• Step 2: During this time, NINJIO Support will prepare your active launch group for the next synchronization and notify you.

Step 3: Update the SCIM token in Microsoft Entra ID

• Step 1: Once you have gotten to notification from NINJIO Support, return to the paused NINJIO Enterprise Application in Microsoft Entra ID.
• Step 2: Go to Provisioning-> Admin Credentials and open the provisioning configuration.

• Step 3: Locate the Secret Token field and replace the existing Secret Token with the newly generated SCIM token.

• Step 4: Test the connection and then Save the configuration.

• Step 5: Once the connection has been confirmed and saved, go to Overview and select Restart provisioning.

Step 4: Confirm provisioning is working as expected

After provisioning restarts, complete the following checks:

• Step 1: Confirm that no authentication errors are displayed.
• Step 2: Review the provisioning logs for any failed attempts.
• Step 3: Verify that users are syncing as expected.
• Step 4: If available, run Provision on Demand for a test user to confirm the connection.

Troubleshooting

• Step 1: If provisioning does not start successfully, confirm that the new SCIM token was copied exactly, without any added spaces or missing characters.
• Step 2: If authentication errors continue, stop provisioning, re-enter the token, save the configuration, and restart provisioning.
• Step 3: If users are not syncing, confirm that the correct users or groups are assigned to the NINJIO Enterprise Application.
• Step 4: If you continue to experience issues, please contact NINJIO Support and include any relevant provisioning error messages or log details.

If you need further assistance, please reach out to support@ninjio.com.