Configuring SCIM Directory Sync with Azure AD

For Dub Enterprise users, you can automatically provision and deprovision users from your Azure Active Directory (AD) to Dub using SCIM Directory Sync.

Step 1: Configure Directory Sync on Dub

In your workspace dashboard on Dub, click on the Settings tab in the menu bar at the top. Then, click on the Security tab in the sidebar.

Under the Directory Sync section, click on Configure. This will open up the Directory Sync modal:

1. Select Azure AD as the Directory Provider.
2. Click Save changes.

This will generate a Directory Sync connection for your Dub workspace, and return 2 values, which will be needed in Step 2:

1. Tenant URL
2. Secret Token

Step 2: Add Provisioning to SAML Application

Click on the Provisioning tab of your existing Dub Okta SAML application that you want to enable SCIM provisioning for.

In the Provisioning tab, click on Get started.

Select Automatic from the Provisioning Mode dropdown. Under the Admin Credentials section, enter the values that you obtained from Step 1:

1. Tenant URL
2. Secret Token

Click on Test Connection to test the connection to see if the credentials are correct, then click Save to save the credentials.

Expand the Mappings section and ensure group and user attribute mappings are enabled for your app. The default mapping should work.

Expand the Settings section and make the following changes:

• Select Sync only assigned users and groups from the Scope dropdown.
• Confirm the Provisioning Status is set to On.

Click Save to save the changes.

Congratulations! You've successfully configured SCIM provisioning for your Dub workspace.

Step 3: Assign Users

Once you've configured Directory sync, you can assign users to Dub directly within Azure AD.

From your application, click the Users and groups from the left navigation menu and click Add user/group.

Click on None Selected under Users.

From the right side of the screen, select the users you want to assign to the app and click the Select button. Thenm click Assign to those users to your app.

Your assigned users should now receive an invitation email to join your Dub workspace.

They will also be able to sign in to Dub using Azure AD SSO.