To add custom or non-standard attributes to your SCIM provisioning jobs you need to configure your SCIM client with the appropriate mappings. The examples shown here for MS Azure and Okta show how to set a Smartalock user group name based on the employee’s email address. For this example, we assume that Smartalock has already been configured with two user groups called “Group A” and “Group B” and we want to pass this data in the SCIM Enterprise User field “division”
We need to configure Smartalock to read the user group name from the SCIM enterprise user field “division”. Go to the Smartalock config portal at https://customer.smartalock.com/config/ and navigate to Users -> SCIM Integration
<aside> 💡 The actual domain used will be specific to the customer and is usually in the format [customer].smartalock.com or [customer].floorsense.com.au – contact your account manager for the exact domain name
</aside>
Scroll to the bottom of the page and select “user.groupname” for the division column. Press “Save” button then navigate to the Services menu item and restart the “SCIM Endpoint” service
We need to configure Azure to place either “Group A” or “Group B” into the SCIM “division” column.
Log into Azure Active Directory, Enterprise Applications, and select the Smartalock SCIM provisioning application that was created during SCIM setup
Select Provisioning then “Edit Attribute Mappings”, expand the “Mappings” section and click on “Provision Azure Active Directory Users”
The attribute mappings are now shown near the bottom of the page. Press the “Add New Mapping” button.