Skip to main content

​
User provisioning described

With user provisioning you can get all user profiles from your company’s identity provider (i.e. Azure) synchronized with Mooncamp. This means when a new employee joins or leaves your organization and would need to be added or deleted as a user to Mooncamp, it will happen automatically once the employee gets added or deleted in your identity provider.
User provisioning is an Enterprise feature and needs to be configured by Mooncamp first. Additionally, your IT administrators might need to first approve Mooncamp as a provider before you can set up user provisioning.

​
Setting up user provisioning with Azure

In order to set up SSO in your account, Navigate to Settings → Security and Identity → User Provisioning
Reset account dialog in the Mooncamp workspace settings with toggles to remove goals, check-ins and demo users
Click on Activate user provisioning. User provisioning is now activated for your account. An API token is required to initiate configuration at azure. Visit the Azure portal and navigate to Enterprise applications.
Enterprise applications icon in the Azure portal
Click New application:
Azure Enterprise applications page with the New application button in the toolbar
Click + Create your own application and name the app Mooncamp user provisioning:
Browse Azure AD Gallery page with the Create your own application button
Select • Integrate any other application you don't find in the gallery (Non-gallery) and click Create. You can ignore the suggestions found from gallery applications.
Create your own application panel with the name Mooncamp user provisioning and the Non-gallery option selected
Navigate to Provisioning and click Get started:
Azure application menu with the Provisioning entry below Users and groups and Single sign-on
Then select Provisioning Mode → Automatic. As a Tenant URL add: https://identity.mooncamp.com/scim/v2 and under Secret Token insert the API token copied from Mooncamp’s setting menu.
Azure Admin Credentials section with the Mooncamp SCIM Tenant URL, a Secret Token and the Test Connection button
After clicking Test Connection you should get a positive feedback.
Azure notification confirming the credentials are authorized to enable Mooncamp user provisioning
Click on Save, expand Mappings and click on Provision Azure Active Directory Users. Find the entry mapping and select it. Set the Matching precedence to 2 and click Ok.
Azure attribute mapping editor for userPrincipalName to userName with Matching precedence set to 2
Find the entry mapping and select it. Change mailNickname to objectId and set Match objects using this attribute to Yes. Matching precedence should be 1. Click Ok. Click again on the entry mapping userPrincipalName → userName and set Match objects using this attribute to No leaving us with a single entry configuring a Matching precedence.
Azure user attribute mappings with objectId mapped to externalId at Matching precedence 1
Click on Save and then on Provisioning at the top of the page.
Azure breadcrumb navigation ending in Mooncamp user provisioning, Provisioning
Select Provision Azure Active Directory Groups. Find the entry mapping and select it. Set the Matching precedence to 2. Click on Ok. Find the entry mapping and select it. Set Match objects using this attribute to Yes. Again find the entry mapping displayName → displayName and set Match objects using this attributes to No.
Azure group attribute mappings with objectId mapped to externalId at Matching precedence 1, plus displayName and members
Click on Saveand configure Users and groups according to your requirements. Click on Start provisioning.
Azure provisioning toolbar with the Start provisioning button
It can take up to an hour until the initial run of the provisioning is started. If the initial run is complete you can start pulling in the users into Mooncamp. Navigate again to Settings → Security and Identity → User Provisioning within Mooncamp. You should now see that there are users available to be synced to Mooncamp
Mooncamp user provisioning summary with 34 users available and the Synchronize button
Click on Synchronize to push these users to Mooncamp. Under Members you should now find these users. The Attribute Mapping section allows you to map any SCIM attribute to Mooncamp Properties. Read more about Mooncamp Properties here: Properties. Users are automatically synchronized to Mooncamp daily. To immediatly synchronize any change provisioned through Azure use the Synchronize button.