Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions Workload-Identity-Federation-for-SCIM-Provisioning.md
Original file line number Diff line number Diff line change
Expand Up @@ -74,13 +74,13 @@ In the Entra App Gallery, the administrator:

The Connectivity page exposes **Workload Identity Federation** as an authentication method alongside the existing authentication options.

![Select Workload Identity Federation as the provisioning authentication method](media/workload-identity-federation/select-workload-identity-federation-auth-method.jpg)
![Select Workload Identity Federation as the provisioning authentication method](media/workload-identity-federation/switch-to-workload-identity-authentication.png)

After selecting **Workload Identity Federation**, the administrator chooses **Select Workload Identity**. From there, they can either register a new workload identity app or select an existing workload identity that has already been configured with the ISV.
After selecting **Workload identity-based authentication**, the administrator enters the Application URL/SCIM endpoint and chooses **Select workload identity**. From there, they can either register a new workload identity app or select an existing workload identity that has already been configured with the ISV.

| Register a new workload identity | Select an existing workload identity |
|---|---|
| ![Register a new workload identity in Entra](media/workload-identity-federation/register-new-workload-identity.jpg) | ![Select an existing workload identity in Entra](media/workload-identity-federation/select-existing-workload-identity.jpg) |
| ![Register a new workload identity in Entra](media/workload-identity-federation/register-new-workload-identity.png) | ![Select an existing workload identity in Entra](media/workload-identity-federation/select-existing-workload-identity.jpg) |

After the workload identity app is configured, the UX displays the following values to be **copied to the ISV Portal**:

Expand Down Expand Up @@ -417,7 +417,7 @@ If the JWKS endpoint is temporarily unavailable:
| Microsoft Entra Workload Identity Federation | [https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation](https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation) |
| Configure Federated Identity Credentials | [https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation-create-trust](https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation-create-trust) |
| SCIM Provisioning with Microsoft Entra | [https://learn.microsoft.com/en-us/entra/identity/app-provisioning/use-scim-to-provision-users-and-groups](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/use-scim-to-provision-users-and-groups) |
| SAP SuccessFactors Integration Reference | [https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference) |
| Configure Workload Identity for SAP SuccessFactors Provisioning | [https://learn.microsoft.com/en-us/entra/identity/app-provisioning/configure-workload-identity-sap-successfactors-provisioning](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/configure-workload-identity-sap-successfactors-provisioning) |
| Microsoft Identity Platform OIDC Metadata | `https://login.microsoftonline.com/{tenantId}/v2.0/.well-known/openid-configuration`|
---

Expand Down
Binary file not shown.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file not shown.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.