This tutorial will help to you configure Entra Application Provisioning (SCIM) for WordPress to provision users from Entra ID to your website using the System for Cross-Domain Identity Management (SCIM) standard.
SCIM communicates user identity data between identity providers and service providers. Microsoft is an example of an identity provider. Your WordPress website is an example of a service provider.
To facilitate the automatic provisioning of users, WPO365 exposes a custom SCIM endpoint that enables Entra (AAD) to connect. Once connected, Entra ID (AAD) will push data concerning new, updated and (soft) deleted (assigned) users to this endpoint. WPO365 processes the incoming data and updates WordPress user profiles accordingly.
Heads up: The screenshots and UI shown in this written tutorial are from an earlier version and do not yet reflect the updated interface introduced in the release 41.0.
For the most accurate and current walkthrough, please refer to the new video tutorial below, which demonstrates the latest UI step by step.
Please note Even though SCIM does also supports the (de-)provisioning of groups, the WPO365 implementation of a custom SCIM endpoint does not. Instead you can assign WordPress users to roles based on their Azure AD group memberships (see https://docs.wpo365.com/article/39-map-between-azure-ad-groups-and-wordpress-roles for details).