Microsoft 365 - User Provisioning

Please note: You will need to follow our Microsoft 365 - SSO Configuration guide before you can provision users.

Configuration

1. Log in to the Microsoft Azure portal (https://portal.azure.com) as an administrator.
2. Select Microsoft Entra ID from the portal menu.
3. Select Enterprise applications.
4. Open the existing uniFLOW Online application created to support single sign-on (see requirements).
5. On the Overview page, click on 3. Provision User Accounts.
6. Click on Get started.
7. As Provisioning Mode, select Automatic.
8. Under Admin Credentials, copy the two values from the uniFLOW Online Provisioning tab (Provisioning tenant URL and Provisioning secret token) to Tenant URL and Secret Token, respectively.

These can be found within your uniFLOW Online tenant site under Extensions > Identity Providers > Configure Identity Providers > Provisioning

Click enable user provisioning

9. Click on Test Connection to see if the credentials are valid, and click Save.
10. Go back to Provisioning.
11. Under Provisioning > Mappings, click on Provision Microsoft Entra ID Users.
12. Under Provisioning > Settings, make sure Sync only assigned users and groups is selected, so that only users or groups that are assigned to the app are created and managed in uniFLOW Online.
13. Go back to the overview of your created application, go to Users and groups and add the users and groups you want to create and manage in uniFLOW Online.

Before you start provisioning:

You’ll need to add a new mapping as Entra ID does not have a local username. The uniFLOW SmartClient relies on a local username to allocate prints to the correct user, so you need to use the mailNickname attribute so that it provisions the correct username within uniFLOW Online.

Add the following new mapping:

Select the following Source attribute and Target attribute

This will now provision the mailNickname attribute as the username within the users uniFLOW Online identities.

Once you are ready to start provisioning, Go to Provisioning (within the enterprise application in the azure admin portal) and click Start provisioning when you are ready. This creates missing users and updates matching users in uniFLOW Online in regular time intervals (every 40 minutes).