Skip to content

docs(scim): added entra id support for scim#6438

Open
ohlookadollar wants to merge 6 commits into
mainfrom
raymond-entra-id-scim
Open

docs(scim): added entra id support for scim#6438
ohlookadollar wants to merge 6 commits into
mainfrom
raymond-entra-id-scim

Conversation

@ohlookadollar

@ohlookadollar ohlookadollar commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds a new guide, SCIM provisioning with Microsoft Entra ID, mirroring the
existing Okta SCIM guide and adapted to Entra's provisioning model (automatic
provisioning, bearer-token auth via the Secret Token field formatted as
<scim-key>:<scim-secret>, attribute mappings, assigned-scope provisioning, and
the ~40-minute sync cycle / Provision on demand).

Also updates the Okta guide (07b_scim-setup.md) — its intro and FAQ previously
stated Entra ID was unsupported because auth was "Basic Auth only"; corrected to
note the endpoint accepts both Basic Auth (Okta) and a bearer token (Entra ID),
with a cross-link to the new guide. Adds the new page to the Cloud access
management index.

No existing URLs change (the new page is a new slug, /cloud/security/scim-setup-entra).

Checklist

@vercel

vercel Bot commented Jun 23, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
clickhouse-docs Ready Ready Preview, Comment Jul 6, 2026 10:25pm
clickhouse-docs-ko Error Error Jul 6, 2026 10:25pm
clickhouse-docs-ru Error Error Jul 6, 2026 10:25pm
clickhouse-docs-zh Error Error Jul 6, 2026 10:25pm
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
clickhouse-docs-jp Ignored Ignored Jul 6, 2026 10:25pm

Request Review

@dhtclk

dhtclk commented Jun 24, 2026

Copy link
Copy Markdown
Collaborator

@ohlookadollar - Had to add an exception to Headings.yml so CI doesn't trip on sentence casing for Entra ID

@ohlookadollar ohlookadollar marked this pull request as ready for review July 6, 2026 18:35
@ohlookadollar ohlookadollar requested a review from a team as a code owner July 6, 2026 18:35
…into chore/add-more-supported-mysql-types

@dhtclk dhtclk left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left a few comments!

<PrivatePreviewBadge/>

:::note
SCIM provisioning is in private preview.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use of the PrivatePreviewBadge makes this note redundant, I would remove this.


Tokens can't be recovered. In **Organization settings → SAML and SCIM settings → SCIM Configuration** in the ClickHouse Cloud Console, revoke the lost token and generate a new one, then update the **Secret Token** in Entra ID.

## Frequently asked questions {#faq}

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I know that the structure of the pre-existing guide was followed, but I find it odd that this faq section and the troubleshooting section are formatted differently. Non-blocking, but perhaps we should make this consistent.

If we want to go above and beyond, which does not have to be in the scope of this pr, we could do an faq section similar to https://clickhouse.com/docs/use-cases/observability/clickstack/faq

Happy to help with this, and it goes beyond the scope of this pr's content, so I'd open a follow up for some formatting fix ups.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants