Skip to content
Support
SSO and provisioning

Teams, SAML and SCIM

A five-minute introduction to how Teams, SAML and SCIM make it simple to manage hundreds or thousands of users, with automated onboarding and offboarding.

The video uses a campus as its example. Among other things, it shows how:

  • a student added to a group in Microsoft Entra ID gets access to the student Wi-Fi, with no manual step
  • binding a team to an onboarding rule gives every resident a private Wi-Fi network of their own
  • a staff team bound to an access policy with Meeting Host turned on lets every staff member approve, extend or end a visitor’s access
  • one team can administer Sign-In in full and have read-only access to EntryPoint
  • blocking a user in the identity provider ends the user’s access at once, and a return within 30 days restores it

Chapters

Section titled “Chapters”

The details

Section titled “The details”

Each part of the video has a page with the details:

Next

How SAML works

How SAML 2.0 single sign-on works: the Organization's two SAML configurations, the sign-ins they serve, the sign-in flow, sign-in started from the identity provider, and what the identity provider must send.

SAML configuration

The SAML 2.0 configuration page section by section, for the Admin Portal and the Self-Service Portal configuration.