How to set up Azure SCIM for Kahoot!

Updated

Enable automatic user provisioning and synchronization between Microsoft Azure and Kahoot! using SCIM. This guide walks you through the step-by-step setup process to configure SCIM in your Azure Enterprise Application for Kahoot!

What are the prerequisites for setting up SCIM?

Before configuring SCIM provisioning, you must have a fully functioning Single Sign-On (SSO) configuration for your Kahoot! workspace. SSO must always be set up first. Once SSO is configured, you can proceed with SCIM on the same setup screen.

☝️ Before full provisioning into an existing Kahoot! platform, make sure you have all existing users assigned to your SCIM provisioning.

Where do I find my Kahoot! SCIM credentials?

You will need to copy your provisioning credentials from Kahoot! to paste into Azure. You can find these on the same screen where you configured your SSO:

  1. Go to the Admin section in your Kahoot! workspace.
  2. Navigate to your SSO & SCIM setup.
  3. Copy the following details:
    • Connector URL (Tenant URL): Copy the ready-made Base URL directly from the Kahoot! UI (e.g., https://apis.kahoot.it/enterprise/scim/v2/[your-organisation-id]). There is no need to manually replace the ID.
    • SCIM Token: Copy the token provided on the screen.

How to configure SCIM in Microsoft Azure

  1. Log in to the Azure Portal.
  2. Go to Enterprise Applications. You can pick the same Enterprise Application that you already set up to connect SSO with Kahoot!, or create a new one.
  3. In the left menu, navigate to Provisioning.

Add Admin Credentials

Under the Admin credentials section, input the details you copied from Kahoot!:

  • Tenant URL: Paste the Base URL copied from the Kahoot! UI.
  • Secret Token: Paste your SCIM Token.
  • Click Test Connection and then click Save.

Configure Mappings

  1. Set Provision Azure Active Directory Users to Yes.
  2. Set Provision Azure Active Directory Groups to No.

Control User Role Mapping

By default, importing user roles via SCIM is disabled for new configurations.

If you want to manage roles within the Kahoot! UI: Simply do not send the role field from Azure. You can manage roles manually within Kahoot!

If you want to manage roles via Azure SCIM:

  1. In Kahoot!, you must toggle on the option to enable role import in your SCIM Configuration settings.
  2. In Azure, enter User mapping to control the mapping of Attributes.
  3. Map an Azure Source Attribute (e.g., employeeType or another custom attribute) to Kahoot!'s target attribute, which is userType.
  4. Ensure your mapped Azure attribute outputs one of the following exact Kahoot! roles:
    • LIMITED
    • MEMBER
    • ADMIN
💡 You can add a default value to be used if the User in Azure does not have a defined role. We recommend setting this to LIMITED, as it is the lowest access role in Kahoot!
☝️ Kahoot! uses the userType cutomappsso Attribute to associate the roles with the new users. You will need to make sure you are matching up against an Azure User Attribute that can carry this value for each user. In the example above employeeType is used, but it could be another field you choose.

How to test and assign users

We recommend only allowing the application to sync assigned users. Leave the Provisioning status set to OFF while you configure your settings.

  1. Access Users & Groups in your Enterprise Application.
  2. Select the groups or users you wish to assign to the application and ensure they have User Roles set in Azure.
  3. Run a Provision on Demand test with a single user to confirm that provisioning works correctly.
  4. Once verified, toggle the Provisioning Status to ON to enable automatic user provisioning.

💡 Read more 💡

➡️ Kahoot!: How to set up and manage SCIM

➡️ Kahoot!: How to set up and manage SSO

➡️ How to set up SAML 2.0 SSO for Kahoot! with Okta

➡️ How to set up OIDC SSO for Kahoot! with Okta

0 comments

Please sign in to leave a comment.