How to provision users using SCIM in Arctera

book

Article ID: 100059182

calendar_today

Updated On:

Description

Description

Users can be provisioned in Arctera using System for Cross Domain Identity Management(SCIM). SCIM leverages an Enterprise Application in Azure AD to provision users in Arctera. 

Provisioning using SCIM is not enabled by default for any company in Arctera. Please contact Support to enable this option for your company.

Note: Currently, users will have Archiving and Personal Archive enabled using the SCIM method.  If this is not desired, using the O365 sync method will allow for additional options.  

Once enabled, use the following steps to configure SCIM. 

1. Login to the Arctera Management console and navigate to Configuration | User Management

2. Click the Generate SCIM Token option. A SCIM token is required to be generated to connect to our hosted SCIM app via Azure AD app.

image.png

3. Once the token is generated, copy it so it can be used in the Azure AD application configuration.

image.png

3. Next, login to the Azure AD admin center (Microsoft Entra admin center) and navigate to Applications | Enterprise Applications

4. Click on New Application | Create your own application. Enter the name of the application and click on Create once the options are selected as below. 

image.png

5. Once the application is created, navigate to Provisioning section and then click Get started

image.png
 

6. Set the Provisioning Mode as Automatic. Set the Tenant URL based upon the datacenter used by your company. Refer the table below for Tenant URL to be used. 

Datacenter Tenant URL
UKS01 https://scim.uk1.archivecloud.net/scim
USW03 https://scim.us3.archivecloud.net/scim
EUW01 https://scim.ams.archivecloud.net/scim
AUE02 https://scim.au2.archivecloud.net/scim
CAC01 https://scim.ca1.archivecloud.net/scim


In the Secret Token section, paste the token copied in Step 3 and click Test Connection

image.png

7. Upon successful validation, the below notification will be seen. Next, click on Save.

image.png

8. Go to Mappings and set Provision Azure Active Directory Groups to No as this is not supported in Alta Archiving. 

image.png


9. Next, click Provision Azure Active Directory Users to create the Attribute Mappings. Add a new attribute to the attribute mapping by selecting Show advanced options | Edit attribute list for customappsso. 

image.png

10. Add the following attribute:urn:ietf:params:scim:schemas:extension:veritas:2.0:User:emailAliases as a String and ensure the Multi-Value flag is checked as seen below. 

image.png

11. Next, add a new attribute by clicking on Add New Mapping. Select the Source attribute proxyAddress and set the Target attribute as urn:ietf:params:scim:schemas:extension:veritas:2.0:User:emailAliases.

12. The final attribute list should look like below.

image.png

13. Add the user(s) whose archive(s) need to be provisioned in Alta Archiving to this app from the Users and groups section.

image.png

14. To provision the users, navigate to Provisioning section of the application. Click Provision on demand, select the user from the list and click on Provision

image.png

15. The provisioning job will run and show the status as below when complete. 

image.png


16. Verify the archive has been created in Alta Archiving Administration console under Configuration > Account Management. 

image.png

Note: Ensure all accepted domain(s) of the company are added to Arctera, before provisioning users via SCIM. 

 

Issue/Introduction

How to provision users using SCIM in Arctera 

Additional Information

JIRA: EVCSRE-60836