> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omni.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra authentication

> Connect Omni to Microsoft Entra for secure SAML single sign-on and automated user provisioning.

You can connect Omni to Microsoft Entra to manage authentication and user access through your organization’s existing identity provider.

Entra supports **SAML** for single sign-on and **SCIM** for automated user provisioning. You can also sync additional **user attributes** like name, title, or department to keep Omni profiles up to date.

## Integration overview

Connecting Entra to Omni allows you to:

1. **Authenticate users** through Entra using SAML.
2. **Control when and how users are provisioned** in Omni.
3. **Sync user profile data** such as display name and department through attribute mappings.

### User provisioning options

Omni supports two approaches for provisioning users:

| Option | How it works | When to use |
| - | - | - |
| **SCIM provisioning** | Users are created in Omni when assigned to the Omni app in Entra. | You want users provisioned immediately upon assignment, regardless of whether they've logged in. |
| **First-login provisioning** | Users are created in Omni only when they first log in via SAML. | You want to control seat usage by provisioning users only when they actually access Omni. |

You can use first-login provisioning with or without SCIM. Refer to the [SAML setup guide](/administration/authentication/entra/saml) for more details.

## Getting started

Follow these steps to get set up.

You can complete SAML only, or add SCIM and attribute sync for a fully automated experience.

| Step | Description | Link |
| - | - | - |
| 1 | **Set up SAML SSO** to let users sign in to Omni with their Entra credentials. | [SAML setup →](/administration/authentication/entra/saml) |
| 2 | **Enable SCIM provisioning** to automatically create, update, and deactivate users in Omni. | [SCIM setup →](/administration/authentication/entra/scim) |
| 3 | **Sync user attributes** like name, title, and department between Entra and Omni. | [Sync attributes →](/administration/authentication/entra/user-attributes) |

## Notes and troubleshooting

* **Admin access required:** You’ll need Entra admin permissions to configure SAML and SCIM.
* **Test before rollout:** Try SSO with a test user before enabling it organization-wide.
* **Sync frequency:** SCIM updates usually occur within a few minutes of changes in Entra.

If you run into issues, check your Entra app configuration or see [Omni's troubleshooting SSO guide](/administration/authentication/troubleshooting).

## Related

* [Omni SAML configuration overview](/administration/authentication)
* [Managing users and groups in Omni](/administration/users)
* [Entra documentation](https://\[idp-docs-link]/)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.