ITRS acquires IP-Label. Read the press release.

  1. Support ▸
  2. Knowledge base ▸
  3. SCIM ▸
  4. Set up SCIM provisioning in Uptrends

Set up SCIM provisioning in Uptrends

Note

Support for SCIM is available for Uptrends Enterprise accounts.

Set up SCIM

This guide uses Microsoft Entra ID as the example identity provider. The same workflow and SCIM endpoint apply to other IdPs.

Before you begin, make sure you meet the SCIM prerequisites.

Complete the following steps to set up SCIM. Each step includes detailed instructions:

  1. Configure SCIM in Uptrends.
  2. Connect your identity provider (IdP) to Uptrends via SCIM.
  3. Provision your IdP.
  4. Verify SCIM setup in Uptrends and your IdP.
  5. Add access permissions to synced groups in Uptrends.

Configure SCIM in Uptrends

Follow these steps to configure SCIM in your Uptrends account.

  1. Log in to Uptrends as an administrator.
  2. Open the SCIM settings, depending on your view:
  • Go to Account setup > SCIM settings.
  • Go to Admin > Operators and groups > SCIM settings.

  1. Create a SCIM service account:

    a. Click Create SCIM service account.

    b. Provide the email address for the service account.

    c. Click Create.

    d. Once created, copy the API key and store it securely. You will use it as the secret token in your IdP. Uptrends shows the key only once. If you lose it, generate a new API key for the SCIM service account.

    e. Copy the SCIM endpoint URL. Use this as the tenant URL in your IdP. For example, use https://api.uptrends.com/v4/scim/v2 for the production URL.

    f. Click Continue.

Connect your identity provider (IdP) to Uptrends via SCIM

Follow these steps to establish a connection between the Uptrends platform and your IdP:

  1. Create a non-gallery enterprise application in Microsoft Entra ID.

Note

You do not need an Entra App Gallery listing to use SCIM with Uptrends. Optionally configure SSO in the same enterprise application using your existing Uptrends SSO setup.

  1. Configure SCIM provisioning in Microsoft Entra ID:

    a. In the enterprise application, go to Provisioning.

    b. Set Provisioning Mode to Automatic.

    c. If your IdP asks you to choose an authentication method, select Bearer authentication.

    d. Under Admin Credentials, enter the following:

  • Tenant URL — SCIM endpoint URL from the Uptrends web application configuration screen. For example, https://api.uptrends.com/v4/scim/v2.

  • Secret Token — API key from your SCIM service account when you configure SCIM in Uptrends.

  1. Click Test Connection. Your IdP verifies the endpoint and token.

A message displays if the connection is successful.

  1. Click Save, then start provisioning.

Provision your IdP with Uptrends via SCIM

Note

Make sure you have already assigned users and groups to the enterprise application under Users and groups before starting provisioning.

Follow these steps to set the provisioning scope and synchronize IdP users to Uptrends:

  1. Go to Settings > Provisioning, then select which users and groups are synced:

  • Sync only assigned users and groups (recommended) — only users and groups you assign to this enterprise application are provisioned into Uptrends.

  • Sync all users and groups — syncs your entire directory. Use this only if you want all users and groups provisioned into Uptrends.

  1. Set Provisioning status to On.

  2. Microsoft Entra ID runs an initial sync, then continues syncing about every 40 minutes.

  3. Monitor progress under Provisioning > View provisioning logs.

Initial sync may take longer depending on the number of users and groups assigned.

Verify a successful provision from IdP and Uptrends

After provisioning finishes, verify the following:

Verify SCIM configuration in your IdP

  1. In your enterprise application, go to Provisioning > View provisioning logs. Confirm users and groups show as created or updated without errors.

Verify SCIM configuration in Uptrends

  1. Open the SCIM settings, depending on your view:
  • Go to Account setup > SCIM settings.
  • Go to Admin > SCIM settings.

Confirm that the endpoint URL and service account are configured correctly.

  1. Open the Operators page, depending on your view:
  • Go to Account setup > Operators and groups.
  • Go to Admin > Operators and groups.

Confirm that the SCIM-managed operators are labeled Managed by your IdP in the list.

  1. Open the Operator groups page, depending on your view:
  • Go to Account setup > Operators and groups.
  • Go to Admin > Operators and groups.

Confirm that the SCIM-managed operator groups are labeled SCIM managed in the list. Confirm membership matches your IdP assignments.

  1. Open the Audit log, depending on your view:
  • Go to Account setup > Audit log.
  • Go to Admin > Audit log.

Confirm that SCIM-initiated user and group changes are recorded in the Uptrends Audit log.

After operators and operator groups are provisioned, review SCIM provisioning behavior in Uptrends for expected behavior, permissions, sync timing, and current limitations.

Map synced groups to Uptrends permissions

SCIM only syncs operators and operator groups in Uptrends. Permissions stay under Uptrends control so you can grant access to monitors, alerts, and other resources without changing your IdP configuration.

Follow these steps to grant access permissions to the synced groups in Uptrends.

For each synced group:

  1. Open the Operators page, depending on your view:
  • Go to Account setup > Operators and groups.
  • Go to Admin > Operators and groups.
  1. Select a SCIM-managed group labeled SCIM managed.
  2. Click Permissions.
  3. Configure which monitors, monitor groups, integrations, alerts, and other resources the group may access.
  4. Repeat for every group that needs Uptrends access.

After you assign permissions, sign in as a provisioned user with SSO or a Uptrends login. Confirm that the user can access the monitors and features expected for their synced group. For more information about Uptrends permissions, see Permissions overview.

Troubleshooting

Test Connection fails

If a test connection fails, confirm the following:

  • Tenant URL matches the exact SCIM endpoint from Uptrends.
  • Secret Token is the SCIM service account API key.

No users or groups appear in Uptrends

If users or groups do not appear in Uptrends after sync, confirm the following:

  • Users or groups are assigned to the enterprise application.
  • The sync scope includes the users and groups you expect.
  • The initial sync has finished. Check the provisioning logs for skips or failures.
  • The user is in an IdP group assigned to the application.

Duplicate operators or groups

  • Operators: the IdP userName must match the existing operator email or username for adoption.
  • Groups: SCIM does not adopt by display name. Set a matching external ID before provisioning starts. Otherwise, a new SCIM-managed group is created.

Users cannot access monitors after sync

  • SCIM does not set permissions. Assign permissions on the SCIM-managed group in Uptrends.
By using the Uptrends website, you consent to the use of cookies in accordance with our Cookie Policy.