> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omni.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra authentication

> Connect Omni to Microsoft Entra for secure SAML single sign-on and automated user provisioning.

You can connect Omni to Microsoft Entra to manage authentication and user access through your organization’s existing identity provider.

Entra supports **SAML** for single sign-on and **SCIM** for automated user provisioning. You can also sync additional **user attributes** like name, title, or department to keep Omni profiles up to date.

## Integration overview

Connecting Entra to Omni allows you to:

1. **Authenticate users** through Entra using SAML.
2. **Control when and how users are provisioned** in Omni.
3. **Sync user profile data** such as display name and department through attribute mappings.

### User provisioning options

Omni supports two approaches for provisioning users:

| Option                       | How it works                                                      | When to use                                                                                      |
| ---------------------------- | ----------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
| **SCIM provisioning**        | Users are created in Omni when assigned to the Omni app in Entra. | You want users provisioned immediately upon assignment, regardless of whether they've logged in. |
| **First-login provisioning** | Users are created in Omni only when they first log in via SAML.   | You want to control seat usage by provisioning users only when they actually access Omni.        |

You can use first-login provisioning with or without SCIM. Refer to the [SAML setup guide](/administration/authentication/entra/saml) for more details.

## Getting started

Follow these steps to get set up.

You can complete SAML only, or add SCIM and attribute sync for a fully automated experience.

| Step | Description                                                                                 | Link                                                                      |
| ---- | ------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------- |
| 1    | **Set up SAML SSO** to let users sign in to Omni with their Entra credentials.              | [SAML setup →](/administration/authentication/entra/saml)                 |
| 2    | **Enable SCIM provisioning** to automatically create, update, and deactivate users in Omni. | [SCIM setup →](/administration/authentication/entra/scim)                 |
| 3    | **Sync user attributes** like name, title, and department between Entra and Omni.           | [Sync attributes →](/administration/authentication/entra/user-attributes) |

## Notes and troubleshooting

* **Admin access required:** You’ll need Entra admin permissions to configure SAML and SCIM.
* **Test before rollout:** Try SSO with a test user before enabling it organization-wide.
* **Sync frequency:** SCIM updates usually occur within a few minutes of changes in Entra.

If you run into issues, check your Entra app configuration or see [Omni's troubleshooting SSO guide](/administration/authentication/troubleshooting).

## Related

* [Omni SAML configuration overview](/administration/authentication)
* [Managing users and groups in Omni](/administration/users)
* [Entra documentation](https://\[idp-docs-link]/)