Skip to content

When provisioning users via SCIM with Azure AD, the auto-generated "Identity" value (built from given name + family name) needs to be a custom value instead — is there a SCIM attribute that can override this?

Answer

This is confirmed as a limitation on the SCIM protocol side, not something IFS can address — there's no mechanism to override the default Identity-creation process during SCIM provisioning, and no SCIM attribute exists for mapping a custom identity value; if a custom Identity value is a hard requirement, it needs to be handled outside the SCIM provisioning flow itself (for example, provisioning the account through a different mechanism, or adjusting the identity afterward) rather than expecting SCIM configuration to support it directly.

← Browse Security and access questions