Home
Connecting to other systems
Learn how to connect ClearID to other systems.
Synchronizing identities using the SCIM integration
To synchronize external system attributes from a supported identity provider into Genetec ClearID™ identity attributes, you can use the System for Cross-domain Identity Management (SCIM) integration. These identity attributes can then be used in ClearID to assign people to roles and automate role-based access control.
Configuring the SCIM integration
Before you can synchronize an external system with Genetec ClearID™, you must first configure the System for Cross-domain Identity Management (SCIM) integration in ClearID and Microsoft Azure.
Disabling Microsoft Entra ID groups setting
Genetec ClearID™ doesn’t support the synchronization of groups. To prevent group settings or attributes from being synchronized, disable the Microsoft Entra ID Groups setting in your Microsoft Azure enterprise application.

About ClearID
Learn about the ClearID self-service physical access management solution.
What's new
Check out what's new in the latest update to ClearID.
Deployment preparation
Check your compatibility and deployment requirements.
ClearID plugin
Learn how to download and install the plugin.
Managing identities and users
Learn how to manage identities and users.
Managing sites
Learn how to manage sites.
Managing areas
Learn how to manage areas.
Managing visitors
Learn how to manage visit requests and access requests.
Managing visitor watchlists
Learn how to manage visitor access using watchlists.
Role-based access control
Learn about role-based access control.
Connecting to other systems
Learn how to connect ClearID to other systems.
- Authenticating your connection
  Before you can connect with Genetec ClearID™ to synchronize data or issue API commands, you must first authenticate your applications (or API environment) so that your applications or API can communicate with ClearID.
- Setting up data synchronization
  Setting up data synchronization in Genetec ClearID™ involves learning some concepts, configuring the synchronization solution for your identity data, and the webhook integration options that are relevant for your organization.
- Synchronizing identities using an API
  Use the Genetec ClearID™ API to code your own solutions to automate various functions in ClearID. The primary use for the REST API is synchronizing identities, however many other scenarios are also possible.
- Synchronizing identities using the SCIM integration
  To synchronize external system attributes from a supported identity provider into Genetec ClearID™ identity attributes, you can use the System for Cross-domain Identity Management (SCIM) integration. These identity attributes can then be used in ClearID to assign people to roles and automate role-based access control.
  - About the SCIM standard
    The System for Cross-domain Identity Management (SCIM) standard is an open-standard protocol for exchanging identity information between entities. It’s widely used to automate the process of managing user identities in IT systems. The SCIM integration ensures that any changes are automatically synchronized to other systems when identity attributes change.
  - About Microsoft Entra ID attribute fields
    When you synchronize an external system with Genetec ClearID™ using the System for Cross-domain Identity Management (SCIM) standard, your external system attributes are imported into ClearID identity attributes. The import uses the field mappings in Microsoft Entra ID.
  - Configuring the SCIM integration
    Before you can synchronize an external system with Genetec ClearID™, you must first configure the System for Cross-domain Identity Management (SCIM) integration in ClearID and Microsoft Azure.
    - Generating a SCIM key
      For your Genetec ClearID™ SCIM integration to communicate with Microsoft Entra ID, you must generate a System for Cross-domain Identity Management (SCIM) key.
    - Creating a Microsoft Azure enterprise application
      Your organization can automate identity attribute provisioning using the Genetec ClearID™ SCIM integration with Microsoft Entra ID as the identity provider. To use the integration, you must first create an enterprise application in Microsoft Azure.
    - Connecting your ClearID SCIM integration to Microsoft Azure
      Before you can use the SCIM integration in Genetec ClearID™ to synchronize identity attributes, you must provide your credentials that connect the ClearID SCIM Integration API to Microsoft Azure.
    - Disabling Microsoft Entra ID groups setting
      Genetec ClearID™ doesn’t support the synchronization of groups. To prevent group settings or attributes from being synchronized, disable the Microsoft Entra ID Groups setting in your Microsoft Azure enterprise application.
    - Configuring Microsoft Entra ID user settings
      To define how identity data flows between Microsoft Entra ID and Genetec ClearID™, you must configure your user settings and map attributes for automatic synchronization.
    - Configuring the ClearID SCIM integration synchronization settings
      To determine what identity data is synchronized to Genetec ClearID™, you must select the required synchronization settings and activate provisioning in Microsoft Azure.
  - Resetting SCIM integration identity data
    To resolve issues with identity data, you can reset and replace all System for Cross-domain Identity Management (SCIM) integration identity data in Genetec ClearID™. This reset process uses the latest values from Microsoft Entra ID.
  - Reviewing the SCIM integration synchronization status
    You can check the overall status of the System for Cross-domain Identity Management (SCIM) integration identity synchronization. You can also review the provisioning logs in Microsoft Azure to see more granular details about Genetec ClearID™ SCIM integration synchronization activities related to a specific person or identity.
- Synchronizing identities using One Identity
  Use the Genetec ClearID™ One Identity Synchronization Tool to synchronize external system attributes into Genetec ClearID™ identity attributes. These identity attributes in ClearID can then be used to assign people to roles and automate role-based access control.
- Synchronizing identities using LDAP
  Use the Genetec ClearID™ LDAP Synchronization Agent to synchronize Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes into Genetec ClearID™ identity attributes. These identity attributes in ClearID can then be used to assign people to roles and automate role-based access control.
ClearID Self-Service Kiosk
Learn about the ClearID Self-Service Kiosk mobile app that simplifies visitor management and check-in.
Troubleshooting
Troubleshoot common issues that can occur.
Additional resources
Need tech support or product information? Check out these resources.
Glossary

Disabling Microsoft Entra ID groups setting

2024-12-12

Genetec ClearID™ doesn’t support the synchronization of groups. To prevent group settings or attributes from being synchronized, disable the Microsoft Entra ID Groups setting in your Microsoft Azure enterprise application.

Before you begin

Connect your ClearID SCIM integration to Microsoft Azure.

What you should know

This procedure is for the ClearID deployment team, your IT department, or the people responsible for administering Microsoft Entra ID in your organization.

Important: ClearID doesn’t support group synchronization. This setting must be disabled.

Procedure

In the Microsoft Azure portal, search for and click Enterprise applications.
In the Enterprise applications section, search for and select your ClearID SCIM integration application.
In the Manage section, click Provisioning and then click Provisioning again.
Expand the Mappings section of the Provisioning page.
Click Provision Microsoft Entra ID Groups.
Move the Enabled slider to No.
Click Save and then click Yes to confirm your changes.
Close the window and return to the Provisioning page.
It might take a moment to refresh the page.

After you finish

Configure your Microsoft Entra ID user settings.