What is SCIM?

Meaning: SCIM (System for Cross-domain Identity Management)

Purpose: SCIM allows organisations to provision Managed Apple IDs immediately and to combine Apple School Manager or Apple Business Manager properties (such as SIS username and grade levels for Apple School Manager and roles) over account data imported from Azure AD. When an organisation imports users with SCIM, the account information is added as read-only in Apple School Manager and Apple Business Manager until they disconnect from SCIM, in which case the accounts become manual accounts and attributes in these accounts can then be edited. Changes made to accounts in Azure AD sync to Apple School Manager and Apple Business Manager accounts every 20 to 40 minutes.

Taken from Apple: Integrate Apple devices with Azure AD

SCIM Tokens expire xxx days, each Administrator will be notified via e-mail 60 days prior to expiry.

How do I update it?

The process is fairly simple, and requires no more than 5 minutes of your time to complete.

• Head over to Apple Business Manager)/Apple School Manager
• Sign in
• Click the profile icon in the top right-hand corner, Click Preferences

• Click Directory Sync, then click Edit

• Click Generate Token, this will display the following pop-up

• Click Copy, then click Close
• Head over to Azure Active Driectory
• Click Enterprise Applications from the left-hand pane
• Locate the Apple Business Manager/Apple School Manager App, Open it by clicking on the name
• Select Provisioning, then click Edit provisioning

• Expand Admin Credentials, paste your previously copied token into the token box, then click Test Connection

• Ensure the connection was successful, then click Save.

Conclusion

And that’s a wrap!!! It really is as simple as that. Once you have completed the update you should receive an e-mail with confirmation of the setup been complete.