1. Help Center
  2. Administration
  3. SCIM

How to set up SCIM with Microsoft Entra ID

Use SCIM to keep your Calendly users in sync with Microsoft Entra ID (formerly Azure Active Directory). SCIM can automatically add, update, turn off, or delete users based on your identity provider (IdP).

Note

SCIM is only available on the Enterprise plan. Some older Enterprise plans include SAML but not SCIM. Check your Billing page or ask your Account Executive to confirm your plan.

Before you begin

  • Set up SAML single sign-on (SSO) before you set up SCIM.
  • You must be a Calendly owner or admin.
  • Keep both Calendly and Microsoft Entra ID open in separate windows during setup.

Step 1 – Turn on SCIM in Calendly

  1. Open Calendly.
  2. Go to Admin center, then select Login.
  3. At the top, select User provisioning.
  4. Turn on Enforce SCIM for my organization.
  5. Choose when the token should expire.
  6. Select Generate new bearer token.
  7. Select Copy token. Save it—you can only copy it once.

Step 2 – Set up SCIM in Microsoft Entra ID

  1. Open the Microsoft Entra ID portal.
  2. Go to Enterprise Applications.
  3. From All Applications, select the app you use for SAML SSO.
  4. In the sidebar, select Provisioning.
  5. From the Manage menu, select Provisioning again.
  6. Set Provisioning Mode to Automatic.
  7. Paste the Calendly token into the Secret Token field.
  8. Copy the Base URL from Calendly and paste it into the Tenant URL field.
  9. Select Test Connection.
    • If it fails, try copying the token and Base URL again.
  10. Select Save.

Step 3 – Set user mappings

  1. In Entra ID, go to Mappings.
  2. Select Provision Microsoft Entra ID Groups.
    • Turn Enabled off, then select Save and close.
  3. Select Provision Microsoft Entra ID Users.
    • Make sure Create and Update are turned on.
    • Decide if you want to turn on Delete:
      • If on, deleted users will lose all Calendly data.
      • If off, users will be turned off but can be reactivated.
  4. Under Attribute Mappings:
    • Keep userName, active, and displayName.
    • Delete all other attributes.
  5. Edit userName:
    • Change the source to mail.
    • Select Ok.
  6. Select Save, then select Yes, and close the window.

Step 4 – Start provisioning

  1. Go to the Settings section.
  2. (Optional) Turn on email alerts for failures. Add the emails to get alerts.
  3. Under Scope, choose Sync only assigned users and groups.
  4. Turn Provisioning Status to On.
  5. Select Save.

Note: SCIM sync runs every 40 minutes. You can also start it manually using Provision on demand.

Step 5 – Add users to Calendly

  1. In Entra ID, go back to the Calendly app.
  2. Select Users and groups.
  3. Select + Add user/group.
  4. Choose your users and select Assign.

Step 6 – Set up attributes for group mapping (optional)

If you want SCIM to place users into Calendly groups automatically:

  1. In Entra ID:
    • Go to Show advanced options, then select Edit attribute list.
    • Add a new row:
      • Attribute: urn:ietf:params:scim:schemas:extension:Calendly:2.0:User:group
      • Type: String
  2. Go back to the Attribute Mappings table.
  3. Select Add new mapping:
    • Choose a source attribute (e.g., department).
    • Set the target attribute to urn:ietf:params:scim:schemas:extension:Calendly:2.0:User:group.
    • Select Ok and Save.

Step 7 – Match users to Calendly groups (optional)

Follow these steps to automate group provisioning.

Was this article helpful?