Versions Compared
Version | Old Version 10 | New Version 11 |
---|---|---|
Changes made by | ||
Saved on |
Key
- This line was added.
- This line was removed.
- Formatting was changed.
After you have published the EmpowerID SCIM microservice app to Azure, you need to return to Azure and do the following post-publishing steps:
Turn on System-assigned managed identity for the App service
assign the SCIM App service root level permissions for the Tenant Root Group
Assign the App service to the Global Administrator role for the tenant.
These steps ensure that EmpowerID has the appropriate authentication and access to read and write the user information for your Azure tenant.
Turn on System-assigned managed identity for the App Service
Log in to your Azure portal as an administrator and navigate to your App service.
Under Settings in the sidebar of the App service, click Identity.
On the Identity page, click the System assigned tab, toggle Status to On and then click Save.

Click Yes when prompted to confirm that you want to enable system assigned managed identity.

Copy the Object ID. The Object ID is the ID of the service principal created when the System assigned managed identity feature is enabled.

Next, assign to the App service root level permissions to the Tenant Root Group as shown below.
Assign the App service root level permissions for the Tenant Root Group
In Azure navigate to Management groups.
Click the details link beside Tenant Root Group.
Image Removed
Image Added
On the tenant root page, click Access Control (IAM) in the sidebar.
Image Removed
Image Added
On the Access Control (IAM) page, click Add and then select Add role assignment.
Image Removed
Image Added
In the Add role assignment pane that appears, click Select a role and then select Owner.
Image Removed
Image Added
Search for and select the App service you deployed to the tenant.
Image Removed
Image Added
Save the role assignment.
Image Removed
Assign the App Service to the Global Administrator role for the tenant
Navigate to Azure Active Directory.
In Azure Active Directory, select Roles and administrators (Preview) from the sidebar.
Image Removed
Enter Global administrator in the search field and then select the Global administrator role.
Image Removed
On the Global administrator | Assignments page, click Add assignments.
Image Removed
In the Add assignments pane that appears, search for the App Service and then click the tile for the service to select it.
Image Removed
Click Add.
Image Removed
Image Added
Insert excerpt | ||||||
---|---|---|---|---|---|---|
|
Div | ||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||
IN THIS ARTICLE
|
Insert excerpt | ||||||
---|---|---|---|---|---|---|
|