SCIM Connector Roles Configuration

Go to Microsoft Azure portal.

Select Enterprise applications then select your enterprise application.

Select User and groups then Application Registration.

Select Create app role CTA.

Fill in the form and click Apply CTA

Please ensure the Value field in the form following the App role convention:
<FLUENT_CONTEXT_TYPE>_<FLUENT_CONTEXT_ID>_<FLUENT_ROLE_ID or IDP_LOGICAL_ROLE_ID>

Note: The display name itself could be anything explanatory. It is the “value” which should follow the pattern.

Review the role which has just been created

Go to Settings in OMS, find and open the key 

`fc.connect.scim-connector.provisioning.pipeline.config`

Make sure to configure inside rules: the elements below:

• `"condition"`

  : a fixed text

• `"type": "HAS_APP_ROLE"`

  : a fixed text

• `"appRole"`

  : is the IDP Logical role defined in App Roles Configuration section that will be translated from.

• `action`

  : a fixed text

• `"type": "MAPPING_ROLE_ASSIGNMENT"`

  : a fixed text

• `"sourceAppRole"`

  : is the IDP Logical role defined in App Roles Configuration that will be translated from.

• `"targetRoles"`

  : is a list of Fluent roles defined in OMS > Admin > Settings > Roles & Permissions that will be translated to.

You can configure many rules as required.

1{
2    "rules": [
3        {
4            "condition": {
5                "type": "HAS_APP_ROLE",
6                "appRole": "Store_Colleague"
7            },
8            "action": {
9                "type": "MAPPING_ROLE_ASSIGNMENT",
10                "sourceAppRole": "Store_Colleague",
11                "targetRoles": [
12                    "STORE",
13                    "CUSTOMER_COLLECTION_MANAGER",
14                    "RETURNS_MANAGER"
15                ]
16            }
17        },
18        {
19            "condition": {
20                "type": "HAS_APP_ROLE",
21                "appRole": "Dat_Test"
22            },
23            "action": {
24                "type": "MAPPING_ROLE_ASSIGNMENT",
25                "sourceAppRole": "Dat_Test",
26                "targetRoles": [
27                    "STORE",
28                    "CUSTOMER_COLLECTION_MANAGER",
29                    "GRAPHQL"
30                ]
31            }
32        }
33    ]
34}

How to manage a user Add or delete users - Microsoft Entra

How to assign roles to user Manage Azure AD user roles - Microsoft Entra

How to provision on-demand Provision a user or group on demand using the Azure Active Directory provisioning service - Microsoft Entra

How to manage a group How to manage groups - Microsoft Entra

How to assign roles to groups: The same steps of “How to assign roles to the user,” but instead of selecting users, you can select the groups and continue assigning roles to them.

How to provision a group: Fluent SCIM connector does not support provisioning groups