The SCIM microservice uses Azure AD authentication to call the Azure API. For this to occur, you need to register a new application (service principal) for EmpowerID in your Azure Active Directory.
Register a service principal
n Azure, navigate to your Azure Active Directory.
On the Azure Active Directory navbar, click App registrations.
On the App registrations page, click New registration.
Name the application, select the scope (single or multitenant), and click Register.
Once the application is registered, copy the Application (client) ID and Directory (tenant) ID from the Overview page. These values are used later.
Navigate to the Certificates & secrets blade for the application and upload the base-64 encoded certificate you are using to secure HTTP traffic between EmpowerID and the microservice. The public key certificate that you upload to Azure must have a corresponding private key in the EmpowerID certificate store; otherwise, an error will occur when calling Azure’s API.
Under Client secrets, click New client secret.
Enter a description for the secret, select the desired expiration time and click Add.
Copy the Secret Value and Secret ID. You need these when setting up authentication.
Next Steps
Create an App Service for the SCIM microservice
Configure SCIM App Service Authentication
Publish the SCIM Microservice to Azure
Set Permissions for the SCIM Managed Identity
Connect EmpowerID to Azure Active Directory