Setting up Microsoft Entra ID

1. In Mercura, open Settings → Integrations → For developers → SCIM provisioning, copy the base URL and create a token.
2. In the Entra admin center, open Enterprise applications → New application → Create your own application and choose Integrate any other application you don't find in the gallery.
3. Under Provisioning, set the mode to Automatic, enter the base URL as Tenant URL and the token as Secret Token, then run Test Connection.
4. Under Mappings, check that userName carries the sign-in e-mail, or that emails[type eq "work"].value carries mail if Mercura takes the address from emails for you (see above), and add preferredLanguage if you want to set the language. Keep group provisioning enabled.
5. Under Users and groups, assign the groups whose members should get access.
6. Back in Mercura, under Group mappings, map the object IDs of the groups that should grant Admin or Contributor.
7. Start provisioning. Entra ID then syncs on its own schedule.