Hi Atlassian Support,
We need help with Microsoft Entra ID SCIM provisioning for Atlassian Cloud.
Organization: magma-operations
Identity provider directory: Magma Healthcare
We want Microsoft Entra ID to manage Atlassian and Confluence onboarding and offboarding.
The existing identity provider directory lets us regenerate the SCIM API key. The API key expiry now shows July 21, 2027.
However, the Atlassian Admin page only shows the API key. It does not show the SCIM Base URL or Directory Base URL.
We need the correct SCIM Tenant URL or Directory Base URL to configure Microsoft Entra provisioning.
We tested expected URL formats in Microsoft Entra, but the test connection fails with HTTP 404 or Unauthorized.
Please confirm the correct SCIM Base URL for this existing identity provider directory, or advise where we can retrieve it from Atlassian Admin.
Thank you.
Kind regards,
Muddassar
Hi
This is a Community forum. Members here will not be able to assist in your specific instance.
If you need help from Atlassian it is best to raise a support ticket via Atlassian support:
https://support.atlassian.com/contact#/
For your specific question there is documentation available on how to set up User Provisioning from Entra to Atlassian Cloud. Try this step-by-step tutorial from Microsoft as it will answer a lot of your questions concerning where to find certain settings:
https://learn.microsoft.com/en-us/entra/identity/saas-apps/atlassian-cloud-provisioning-tutorial
Hi @The IT Team ,
You should be able to fetch the directory ID with this: Get directories in an organization
Then, the standard SCIM Base URL for Atlassian Cloud follows this structure:
https://api.atlassian.com/scim/directory/{directory-id}
You could delete the provisioning configuration altogether (from Atlassian Administration) and set it up again, as you'll get to a screen where you can see that value you're looking for, but I'm not sure if that's the best practice here + what would actually happen with the users on the Atlassian side. 👀
Anyway, REST API is the best course here.
Cheers,
Tobi
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Muddassar, it comes back in the same dialog as the key. Atlassian Administration, Security, User security, Identity providers, open your directory, then the three dot menu under User provisioning and Regenerate API key. That screen shows the Directory base URL next to the new key.
The setup screen only ever shows both once. That's why you're left holding the key on its own.
Format is https://api.atlassian.com/scim/directory/ plus your directory id, and that whole string goes in Entra's Tenant URL while the key goes in Secret Token. A 404 on test connection points at the URL. Unauthorized points at the key.
Regenerating kills your current key though, the one expiring July 2027, so copy both values off that screen this time.
https://developer.atlassian.com/cloud/admin/user-provisioning/rest/intro/
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.