Introduction
When utilizing SCIM to synchronize users and groups information from Azure AD to Artifactory, the default attribute assigned to the username is Azure’s userPrincipalName. However, since some organizations manage their Azure AD environments differently, it may be necessary to modify the default settings to correspond with the appropriate Azure AD attribute.
Please note that, as per our SCIM documentation, update endpoints are not supported in Artifactory.
Before implementing this change, please consider the following:
- Existing Users: If users with these attributes already exist in Artifactory, the new user objects may not be created.
- Duplicate Identities: If there are users with overlapping or identical attributes, multiple accounts may be created for the same individual.
Resolution
To make this adjustment, follow the steps outlined below:
1. Access the Enterprise Application in the Azure portal.
2. Navigate to the ‘Provision Microsoft Entra ID Users’ section within the Attribute Mapping view:
3. In the Attribute Mappings, change the ‘userName’ mapping from userPrincipalName to the desired attribute (for example, mailNickname).
4. After running ‘Provision on demand,’ confirm that the user now appears in Artifactory with their mailNickname as the username:
