How to set up Azure SCIM for Kahoot!
Enable automatic user provisioning and synchronization between Azure and Kahoot! using SCIM. This guide walks you through the step-by-step setup process to configure SCIM in your Azure Enterprise Application for Kahoot!
📌 Important! Before full provisioning into an existing Kahoot! platform, make sure you have all existing users assigned to your SCIM provisioning.
You will need the following from Kahoot! to set your SCIM provisioning in one of your Enterprise Applications in Azure.
| Connector URL | https://apis.kahoot.it/enterprise/scim/v2/[organisationId] |
| SCIM Token | You can copy the SCIM token from your SSO & SCIM setup in the Admin section in your Kahoot! workspace. |
| OrganisationID | Provided by your Kahoot! representative or by contacting Kahoot! Support |
Setting in Microsoft Azure
- Log in to Azure Portal and create a new Enterprise Application.
- In the menu, navigate to Provisioning.
Add Admin credentials
-
Under Admin credentials, add:
• Tenat URL (make sure to replace [organisationid] with your OrganisationID.
• Secret Token
- Test the connection and click Save.
Mappings
- Add Yes to Users
- Add No to Groups
Control User Mapping
- Enter User mapping to control the mapping of Attributes and make sure it matches the screenshot below.
Note! Kahoot!'s target attribute for a User Role is userType. It is up to you which Source Attribute in Azure you wish to use to store the roles.
Kahoot! User roles
- LIMITED
- MEMBER
- ADMIN
Note! You can add a default value to be used if the User in Azure does not have one. In this case, it will often be LIMITED, being the lowest access role in Kahoot!
Important! Kahoot uses the userType cutomappsso Attribute to associate the roles with the new users. You will need to make sure you are matching up against an Azure User Attribute that can carry this value for each user. In the example above employeeType is used, but it could be another field you choose.
We recommend only allowing the application to sync the assigned users. You can control additional settings in these sections as you see fit.
- Leave Provisioning status OFF for now.
- Click Save when you are done.
Assigning User & Groups
Access Users & Groups in your Enterprise Application and select the groups / user you wish to assign to the Application.
Test provisioning
- Ensure users have User Roles set in Azure.
- Run a Provision on Demand test with a single user to confirm provisioning works correctly.
- Once verified, toggle Provisioning Status → ON to enable automatic user provisioning.
0 comments
Please sign in to leave a comment.