Home
Connecting to other systems
Learn how to connect ClearID to other systems.
Synchronizing identities using the SCIM integration
To synchronize external system attributes from a supported identity provider into Genetec ClearID™ identity attributes, you can use the System for Cross-domain Identity Management (SCIM) integration. These identity attributes can then be used in ClearID to assign people to roles and automate role-based access control.
Configuring the SCIM integration
Before you can synchronize an external system with Genetec ClearID™, you must first configure the System for Cross-domain Identity Management (SCIM) integration in ClearID and Microsoft Azure.

About ClearID
Learn about the ClearID self-service physical access management solution.
What's new
Check out what's new in the latest update to ClearID.
Deployment preparation
Check your compatibility and deployment requirements.
Account configuration
Learn how to configure and customize the ClearID portal.
ClearID plugin
Learn how to download and install the plugin.
Managing identities and users
Learn how to manage identities and users.
Credential synchronization
Managing sites
Learn how to manage sites.
Managing visitors
Learn how to manage visit requests and access requests.
Managing areas
Learn how to manage areas.
Managing visitor watchlists
Learn how to manage visitor access using watchlists.
Role-based access control
Learn about role-based access control.
Connecting to other systems
Learn how to connect ClearID to other systems.
- Authenticating your connection
  Before your applications can communicate with Genetec ClearID™, to synchronize data or issue API commands, they must be authenticated.
- Setting up data synchronization
  Setting up data synchronization in Genetec ClearID™ involves learning some concepts, configuring the synchronization solution for your identity data, and the webhook integration options that are relevant for your organization.
- Synchronizing identities using Microsoft Entra ID
  To synchronize external system attributes into Genetec ClearID™ identity attributes, you can use the web portal's integrated Microsoft Entra ID synchronization.
- Synchronizing identities using Cloud CSV
  To synchronize attributes from CSV files into Genetec ClearID™ identity attributes, you can use the web portal's Cloud CSV synchronization.
- Synchronizing identities using an API
  Use the Genetec ClearID™ API to code your own solutions to automate various functions in ClearID. The primary use for the REST API is synchronizing identities, however many other scenarios are also possible.
- Synchronizing identities using the SCIM integration
  To synchronize external system attributes from a supported identity provider into Genetec ClearID™ identity attributes, you can use the System for Cross-domain Identity Management (SCIM) integration. These identity attributes can then be used in ClearID to assign people to roles and automate role-based access control.
  - About the SCIM standard
    The System for Cross-domain Identity Management (SCIM) standard is an open-standard protocol for exchanging identity information between entities. It’s widely used to automate the process of managing user identities in IT systems. The SCIM integration ensures that any changes are automatically synchronized to other systems when identity attributes change.
  - About Microsoft Entra ID attribute fields (SCIM)
    When you synchronize an external system with Genetec ClearID™ using the System for Cross-domain Identity Management (SCIM) standard, your external system attributes are imported into ClearID identity attributes. The import uses the field mappings in Microsoft Entra ID.
  - Configuring the SCIM integration
    Before you can synchronize an external system with Genetec ClearID™, you must first configure the System for Cross-domain Identity Management (SCIM) integration in ClearID and Microsoft Azure.
    - Generating a SCIM key
      For your Genetec ClearID™ SCIM integration to communicate with Microsoft Entra ID, you must generate a System for Cross-domain Identity Management (SCIM) key.
    - Creating a Microsoft Azure enterprise application
      Your organization can automate identity attribute provisioning using the Genetec ClearID™ SCIM integration with Microsoft Entra ID as the identity provider. To use the integration, you must first create an enterprise application in Microsoft Azure.
    - Connecting your ClearID SCIM integration to Microsoft Entra ID
      Before you can use the SCIM integration in Genetec ClearID™ to synchronize identity attributes, you must provide your credentials that connect the ClearID SCIM Integration API to Microsoft Entra ID.
    - Disabling Microsoft Entra ID groups setting
      Genetec ClearID™ doesn’t support the synchronization of groups. To prevent group settings or attributes from being synchronized, disable the Microsoft Entra ID Groups setting in your Microsoft Azure enterprise application.
    - Configuring Microsoft Entra ID user settings
      To define how identity data flows between Microsoft Entra ID and Genetec ClearID™, you must configure your user settings and map attributes for automatic synchronization.
    - Configuring the ClearID SCIM integration synchronization settings
      To determine what identity data is synchronized to Genetec ClearID™, you must select the required synchronization settings and activate provisioning in Microsoft Azure.
  - Resetting SCIM integration identity data
    To resolve issues with identity data, you can reset and replace all System for Cross-domain Identity Management (SCIM) integration identity data in Genetec ClearID™. This reset process uses the latest values from Microsoft Entra ID.
  - Reviewing the SCIM integration synchronization status
    You can check the overall status of the System for Cross-domain Identity Management (SCIM) integration identity synchronization. You can also review the provisioning logs in Microsoft Azure to see more granular details about Genetec ClearID™ SCIM integration synchronization activities related to a specific person or identity.
- Synchronizing identities using One Identity
  Use the Genetec ClearID™ One Identity Synchronization Tool to synchronize external system attributes into Genetec ClearID™ identity attributes. These identity attributes in ClearID can then be used to assign people to roles and automate role-based access control.
- Synchronizing identities using LDAP
  Use the Genetec ClearID™ LDAP Synchronization Agent to synchronize Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes into Genetec ClearID™ identity attributes. These identity attributes in ClearID can then be used to assign people to roles and automate role-based access control.
Visitor management devices
Learn about the ClearID Self-Service Kiosk mobile app that simplifies visitor management and check-in.
Troubleshooting
Troubleshoot common issues that can occur.
Additional resources
Need tech support or product information? Check out these resources.
Glossary

Configuring the SCIM integration

2026-01-30

Before you can synchronize an external system with Genetec ClearID™, you must first configure the System for Cross-domain Identity Management (SCIM) integration in ClearID and Microsoft Azure.

Before you begin

What you should know

This procedure is for the ClearID deployment team, your IT department, or the people responsible for administering Microsoft Entra ID in your organization.
Only Microsoft Entra ID is currently supported. If you want to integrate another supported identity provider, contact your deployment representative.
Make sure to disable Microsoft Entra ID group settings. ClearID does not support the synchronization of groups.

Procedure

After you finish

Review the SCIM integration synchronization status.