System for Cross-domain Identity Management (SCIM) is a standard for automating the exchange of user identity information between identity domains or IT systems. SCIM enables Microsoft Entra ID to synchronize user data attributes like name, email, and job title and automate license provisioning with Sales Navigator. By integrating Microsoft Entra ID and Sales Navigator for SCIM, organizations benefit from a streamlined and secure workflow for managing user identities and assigning licenses.
Integration steps
There are several steps when setting up the integration between Microsoft Entra ID and Sales Navigator for SCIM:
- Set up Sales Navigator in the Azure Management Portal.
- Configure user and group assignment.
- Configure the provisioning service token to connect Sales Navigator.
- Configure user and group attribute mappings.
- Turn on the provisioning service.
Step One: Set up Sales Navigator in the Azure Management Portal
-
Sign in to your Microsoft Azure Management Portal as a Global Administrator.
-
In the Search box, enter Microsoft Entra ID.
-
Select Microsoft Entra ID from the search results.
-
On the Overview page, click Add and select Enterprise application from the dropdown menu.
-
On the Browse Microsoft Entra App Gallery page, search for Sales Navigator in the Search box, and select LinkedIn Sales Navigator from the search results.
-
The Sales Navigator app will open on the right-side of the page. Scroll down and click Create to create the Sales Navigator instance.
Step two: Configure user and group assignment
To assign the users or groups that you would like to be provisioned to Sale Navigator:
-
On the LinkedIn Sales Navigator Overview page, click Assign users and groups.
-
On the Users and groups page, click Add user/group.
-
On the Add Assignment page, select the Users and groups section on the left side of the page. The Users and Groups pane will open on the right side of the page.
-
Select the Users tab and in the Search box, enter the required user. Select the checkbox next to the user's name, and click Select in the lower-right corner of the pane.
-
On the Add Assignment page, select the Select a role section on the left side of the page. The Select a role pane will open on the right side of the page.
-
Select User and click Select in the lower-right corner of the pane.
-
Click Assign in the lower-left corner of the page to complete the user and role assignment. The Users and groups page opens and displays the added user and role assigned.
Step three: Configure the provisioning service token to connect Sales Navigator
To configure the provisioning service token:
-
Click Provisioning from the left menu.
-
Sign in to Sales Navigator as an admin and navigate to LinkedIn Admin Center.
-
Click the Settings tab and expand the SCIM dropdown. Click + Add new SCIM configuration.
-
Enter a name for the configuration and turn on the Auto-assign licenses toggle.
-
Select the appropriate license from the License assignment dropdown menu and click Generate token.
-
Copy the generated token by clicking Copy to clipboard.
-
Return to the Microsoft Azure Management Portal and on the LinkedIn Sales Navigator Overview page, click New configuration to create a new provisioning configuration.
-
On the New provisioning configuration page, paste the access token you copied into the Secret token field.
-
Click Test connection to confirm the token is authorized to enable provisioning. Once confirmed, a confirmation message is displayed in the upper-right corner of the page.
-
Click Create in the lower-left corner of the page to complete and return to the LinkedIn Sales Navigator Overview page.
Step four: Configure user and group attribute mappings
Attribute mapping defines the user and group data that is synchronized between Microsoft Entra ID and Sale Navigator.
To configure user and group attribute data:
-
Click the Get Started tab and scroll down to the Map attributes (optional) section.
-
Click Edit attributes.
-
On the Attribute Mapping page, click Provision Microsoft Entra ID Users or Provision Microsoft Entra ID Groups and check the mappings for both.
-
Make any required changes and click Save.
Step five: Turn on the provisioning service
Once the provisioning service is turned on, the service performs an initial synchronization that retrieves the list of users from Microsoft Entra ID, filters the users based on the assignment and scoping filters, and synchronizes the users to Sales Navigator.
When this initial synchronization is complete, the provisioning service goes into incremental change mode where it only makes changes to Sales Navigator based on changes to the users detected in Microsoft Entra ID. This includes detecting and provisioning new users, updating user attributes when they are changed in Microsoft Entra ID and deactivating access when users are unassigned from the app in Microsoft Entra ID.
To turn on the provisioning service:
-
Return to the LinkedIn Sales Navigator Overview page and click Start Provisioning. The service performs an initial synchronization that retrieves the list of users from Microsoft Entra ID, filters the users based on the assignment and scoping filters, and synchronizes the users to Sales Navigator.
-
Optional: You can click Provision on demand for a subset of users or groups.
-
Success notifications are displayed once provisioning is complete.
-
Return to LinkedIn Admin Center and click the Users tab.
-
Locate the user whose enterprise profile you want to view and click on their name.
-
You'll be routed to the user's enterprise profile where you can confirm the user email matches what's in Microsoft Entra ID.
Use audit logs to monitor and troubleshoot automatic user provisioning
To monitor and troubleshoot the provisioning service, view the provisioning logs in the Microsoft Azure Management Portal which record all activities performed by the provisioning service.