Home
Connecting to other systems
Learn how to connect ClearID to other systems.
Synchronizing identities using the SCIM integration
To synchronize external system attributes from a supported identity provider into Genetec ClearID™ identity attributes, you can use the System for Cross-domain Identity Management (SCIM) integration. These identity attributes can then be used in ClearID to assign people to roles and automate role-based access control.
Connecting your ClearID SCIM integration to Microsoft Entra ID
To synchronize identity attributes using the SCIM integration, you must provide connection credentials in Microsoft Entra ID.

About ClearID
Learn about the ClearID self-service physical access management solution.
What's new
Check out what's new in the latest update to ClearID.
Deployment preparation
Check your compatibility and deployment requirements.
Account configuration
Learn how to configure and customize the ClearID portal.
ClearID plugin
Learn how to download and install the plugin.
Managing identities and users
Learn how to manage identities and users.
Credential synchronization
Managing sites
Learn how to manage sites.
Managing visitors
Learn how to manage visit requests and access requests.
Managing areas
Learn how to manage areas.
Managing visitor watchlists
Learn how to manage visitor access using watchlists.
Role-based access control
Learn about role-based access control.
Connecting to other systems
Learn how to connect ClearID to other systems.
- Authenticating your connection
  To allow external applications to synchronize data or issue API commands, you must first authenticate the connection in Genetec ClearID™.
- Data synchronization overview
  Setting up data synchronization in Genetec ClearID™ involves learning some concepts, configuring the synchronization solution for your identity data, and the webhook integration options that are relevant for your organization.
- Synchronizing identities using Microsoft Entra ID
  To map external system attributes to internal identity profiles, Account administrators and IT security personnel can synchronize identities using Microsoft Entra ID in Genetec ClearID™.
- Synchronizing identities using Cloud CSV
  To synchronize attributes from CSV files into Genetec ClearID™ identity attributes, you can use the web portal's Cloud CSV synchronization.
- How identities are synchronized using an API
  Use the Genetec ClearID™ API to code your own solutions to automate various functions in ClearID. The primary use for the REST API is synchronizing identities, however many other scenarios are also possible.
- Synchronizing identities using the SCIM integration
  To synchronize external system attributes from a supported identity provider into Genetec ClearID™ identity attributes, you can use the System for Cross-domain Identity Management (SCIM) integration. These identity attributes can then be used in ClearID to assign people to roles and automate role-based access control.
  - About the SCIM standard
    The System for Cross-domain Identity Management (SCIM) standard is an open-standard protocol for exchanging identity information between entities. It’s widely used to automate the process of managing user identities in IT systems. The SCIM integration ensures that any changes are automatically synchronized to other systems when identity attributes change.
  - Microsoft Entra ID attribute fields (SCIM)
    SCIM attribute fields enable the synchronization of external identity data with Genetec ClearID™ using established field mappings from Microsoft Entra ID.
  - Generating a SCIM key
    To enable secure communication between Microsoft Entra ID and the SCIM integration, ClearID portal administrators must generate a System for Cross-domain Identity Management (SCIM) key in Genetec ClearID™.
  - Creating a Microsoft Azure enterprise application
    To automate identity attribute provisioning using the SCIM integration, you must first create an enterprise application in Microsoft Azure.
  - Connecting your ClearID SCIM integration to Microsoft Entra ID
    To synchronize identity attributes using the SCIM integration, you must provide connection credentials in Microsoft Entra ID.
  - Disabling Microsoft Entra ID groups setting
    To prevent unsupported group settings from being synchronized, you must disable Microsoft Entra ID group synchronization in the Microsoft Azure enterprise application.
  - Configuring Microsoft Entra ID user settings
    To define how identity data flows between Microsoft Entra ID and Genetec ClearID™, you must configure your user settings and map attributes for automatic synchronization.
  - Configuring the ClearID SCIM integration synchronization settings
    To determine what identity data is synchronized to Genetec ClearID™, you must select the required synchronization settings and activate provisioning in Microsoft Azure.
  - Resetting SCIM integration identity data
    To resolve issues with identity data, you can reset and replace all System for Cross-domain Identity Management (SCIM) integration identity data in Genetec ClearID™. This reset process uses the latest values from Microsoft Entra ID.
  - Reviewing the SCIM integration synchronization status
    To verify integration health or troubleshoot specific identity activities, you can review the SCIM synchronization status and provisioning logs in Microsoft Azure.
- Synchronizing identities using One Identity
  To automate role-based access control and assign people to roles, you can synchronize external system attributes using the One Identity Synchronization Tool in Genetec ClearID™.
- Synchronizing identities using LDAP
  To automate role-based access control and assign people to roles, you can synchronize Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes using the LDAP Synchronization Agent in Genetec ClearID™.
Visitor management devices
Learn about the ClearID Self-Service Kiosk mobile app that simplifies visitor management and check-in.
Troubleshooting
Troubleshoot common issues that can occur.
Additional resources
Need tech support or product information? Check out these resources.
Glossary

Connecting your ClearID SCIM integration to Microsoft Entra ID

2026-05-06

To synchronize identity attributes using the SCIM integration, you must provide connection credentials in Microsoft Entra ID.

Before you begin

Create your Microsoft Azure enterprise application.

What you should know

This procedure is for the ClearID deployment team, your IT department, or the people responsible for administering Microsoft Entra ID in your organization.

Procedure

In the Microsoft Entra ID portal, find and click Enterprise applications.
In the Enterprise applications section, search for and select your ClearID SCIM integration application.
In the Manage section, click Provisioning and then click Provisioning again.
From the Provisioning Mode list, select Automatic.
Expand the Admin Credentials section.
In the ClearID portal SCIM integration tab, locate the Endpoint URL section and click Copy to clipboard next to the Microsoft Entra ID identity provider.
The endpoint URL is copied to your clipboard.
Return to the Microsoft Entra ID Provisioning page and paste into the Tenant URL.
The endpoint URL is used to connect ClearID to SCIM authentication systems and Microsoft Entra ID.
In the ClearID portal SCIM integration tab, locate the Generate key section and click Copy to clipboard.
Return to the Microsoft Entra ID Provisioning page and paste into the Secret Token field.
The SCIM key is used to authenticate your application with Entra ID.
Click Test Connection.
Click Save.
Watch for a successful update notification in the upper right of the screen.

After you finish

Configure Microsoft Entra ID to only send supported data types by explicitly disabling the default group synchronization setting.