Enterprise Application How-to

Step 1 - Generate the SCIM Token

In a web browser, go to https://assetasyst.com. You’ll be prompted to login. Enter your admin account credentials. Once logged in, you’ll see the following:

image

Click on menu icon (next to the logo). Then click on Admin->Generate Token. You should see the following:

image

Hit the Generate button and copy the token text sequence for later!

Step 2 - Create the Custom Enterprise Application

  1. In the Azure Portal, navigate to Azure AD and make sure you’re on the relevant Directory
  2. Go to Enterprise Applications
  3. Click on New Application
  4. In Browse Azure AD Gallery, click “Create your own application”
  5. Set the application name to “AssetAsyst SCIM” or something else if you prefer
  6. Select the option to integrate with a non-gallery application, and click Create
  7. Navigate to the application once it is created

Step 3 - Configure Provisioning

  1. Click on Provisioning
  2. Set the Provisioning Mode to “Automatic”
  3. In the Admin Credentials section:
    • Set the Tenant URL to https://rimmer.assetasyst.com/scim
    • Set the Secret Token to the value generated in Step 1 (above)
  4. Enter what you’d like for Settings
  5. Click Save

Step 4 - Group Mappings

  1. Click on the Provision Active Directory Groups link to bring up Attribute Mapping
  2. Make sure that Enabled is “off”
  3. Click Save
  4. Return to the Provisioning screen

Step 5 - User Mappings

  1. Click on the Provision Active Directory Users link to bring up Attribute Mapping
  2. Make sure that Enabled “on”
  3. For Target Object Actions check Create, Update and Delete
  4. Mappings are as follows:

    Name Type Mandatory Azure AD Mapping Description
    externalId string Yes objectid Unique Guid that represents the user.
    userName string Yes userPrincipalName Unique name that represents user within Tenant
    active boolean Yes Switch([IsSoftDeleted], , “False”, “True”, “True”, “False”) Used to indicate whether the identity is active (true) or should be deprovisioned (false).
    emails[type eq “work”].value string   mail Work email address
    displayName string   displayName Display name for the user.
    name.givenName string   givenName The first name of the user.
    name.familyName string   surname The last name of the user.
  5. Click Save
  6. Return to the Provisioning screen

Step 6 - Automatic Provisioning and Adding Users!

If you want provisioning to occur automatically, set Provisioning Status “on”.

To give users access to AssetAsyst, add them as a user to the AssetAsyst SCIM application!