> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omni.co/llms.txt
> Use this file to discover all available pages before exploring further.

<AgentInstructions>

## Submitting Feedback

If you encounter incorrect, outdated, or confusing documentation on this page, submit feedback:

POST https://docs.omni.co/feedback

```json
{
  "path": "/administration/authentication/entra/user-attributes",
  "feedback": "Description of the issue"
}
```

Only submit feedback when you have something specific and actionable to report.

</AgentInstructions>

# Syncing Microsoft Entra user attributes to Omni with SCIM

> Sync user attributes from Microsoft Entra to Omni via SCIM.

Custom user attributes can be synced from Microsoft Entra (formerly Active Directory / Azure AD) to Omni, allowing you to fully centralize your user management in Microsoft Entra.

In this guide, we'll demonstrate how to sync a user attribute named `blob_entity` from Microsoft Entra to Omni.

## Requirements

To follow the steps in this guide, you'll need:

* **To set up SCIM provisioning with Entra**. Refer to the [Omni Entra SCIM guide](/administration/authentication/entra/scim) for more information.
* **Organization Admin** permissions in Omni
* **Permissions in Microsoft Entra** that allow you to:
  * Access the admin panel
  * Create user profile attributes
  * Modify applications

## Limitations

Omni [system user attributes](/administration/users/attributes#default-system-user-attributes) are read-only and cannot be assigned via SCIM.

## Setup

<Steps>
  <Step title="Create an Omni user attribute">
    In Omni, navigate to **Settings > Attributes** and [create a new attribute](/administration/users/attributes).

    Our example attribute, `blob_entity`, has the following settings:

    * **Name** - `Blob Entity`
    * **Reference** - `blob_entity`
    * **Type** - `string`

          <img src="https://mintcdn.com/omni-e7402367/pGnmRvM0SVfXp3bi/images/docs/administration/saml/active-directory/assets/images/okta-omni-attribute-6b49af33e3ab53f59d41617070ecad7f.png?fit=max&auto=format&n=pGnmRvM0SVfXp3bi&q=85&s=a314422a7460654f61e046f7140f979d" alt="" width="477" height="616" data-path="images/docs/administration/saml/active-directory/assets/images/okta-omni-attribute-6b49af33e3ab53f59d41617070ecad7f.png" />
  </Step>

  <Step title="Create an Entra user attribute">
    1. Log in to your Entra admin panel.
    2. Navigate to **Entra ID > Enterprise apps**.
    3. Click the Omni application.
    4. In the side navigation, click **Provisioning** under the **Manage** heading.
    5. Open the **Mappings** section.
    6. In this section, select the user you want to add an attribute to.
    7. At the bottom of the page, select **Show advanced options**.
    8. Select **Edit attribute list for customappsso**.
    9. Enter the following for the attribute:
       * **Name** - Enter the **reference** of the attribute you created in Omni in step 1, prefixed with the following:
         ```txt theme={null}
         urn:omni:params:1.0:UserAttribute:
         ```
         For example, for the `blob_entity` attribute, you'd enter `urn:omni:params:1.0:UserAttribute:blob_entity`.
       * **Type** - Select the **type** of the attribute you created in Omni: `string` or `integer`
       * **Multi-value?** - Select this option if the Omni attribute is configured to support multiple values.
    10. Configure the remaining fields as needed.
    11. Save the changes.
  </Step>

  <Step title="Create attribute mapping">
    1. A message should display after you click **Save** - click **Yes**.
    2. In the **Attribute Mapping** page that opens, click **Add New Mapping**.
    3. In the **Target attribute** dropdown, select the attribute you created in step 2.
    4. Configure the remaining fields to map the appropriate value to the attribute.
    5. Click **OK**, then **Save**.
  </Step>
</Steps>

## What's next?

The Omni application should be set to automatically provision users and groups - see the [Entra SCIM guide](/administration/authentication/entra/scim) - meaning that the next time the app syncs, the attributes should be created as [user attributes in Omni](/administration/users/attributes).