Configure Single Sign-On between Entra ID and BizLibrary

If you have already configured SSO, you can move to the next section. Otherwise, please follow the instruction in this link: User Authentication in Microsoft Azure – BizLibrary

Obtain Billing ID and API Key from BizLibrary

Contact your BizLibrary Client Success Manager and obtain Billing ID and API Key that are required for setting up user/group provisioning from Entra ID. You will need to provide your primary Entra domain and request an OAUTH based API key.

Create a New Provisioning in Entra ID

1. Go to the Entra ID console > Enterprise apps
2. Select the application that has been configured SSO with BizLibrary.
3. Under Manage section, click Provisioning.
4. Again, under Manage section, click Provisioning.
5. Under Provisioning Mode, select Automatic
6. Under Authentication Method, select Bearer Authentication.
7. Under Tenant URL, type the following by replacing <billing_id> with your Billing ID. https://scim-api.bizlibrary.com/prod/<billing_id>/scim/v2/oauth
8. Under Secret Token, type the API Key that you have obtained from BizLibrary.
9. Click Test Connect and see if it succeeds. Otherwise, please contact BizLibrary for troubleshooting.
10. Click Save.
11. At the top of the page, you see something like Home > Enterprise applications | All applications > your application. Here, you click your application name which brings you back to the top page of your application.
12. Click Attribute mapping > Provision Microsoft Entra ID Users
13. Make sure Enabled is set to Yes
14. Under Target Object Actions, make sure Create, Update, and Dalete are checked.
15. If any settings on this page are modified, click Save.

Update Custom Attribute List

Now, we are going to prepare custom user attributes to synchronize with BizLibrary LMS.

1. Under your application > Provisioning > Attribute Mapping > Provision Microsoft Entra ID Users, scroll the page to the bottom.
2. Click on the checkbox next to “Show advanced options”
3. Click Edit attribute list for customappsso

4. Now, you are on Edit Attribute List page that looks like this.

   

5. Add any custom attributes (customappsso User Attribute) that you want to synchronize with BizLibrary from the table below. The required attributes must be included. Beyond those, you may select any additional attributes you wish to sync. Note: All attributes are of type String, unless stated otherwise.

6. Mark the following attributes as required:
   • Id
   • Active
   • emails[type eq "work"].value
   • username
   • name.givenName
   • name.familyName
7. Once you are done with updating the custom attribute list, click Save.

Create Attribute Mappings

1. On the Entra console, go to your application > Provisioning > Attribute mapping > Provision Microsoft Entra ID Users.

2. Go down the page and find the Attribute Mapping section which looks like below.  

   

3. Edit the required attributes as follows if you see any discrepancies.

4. The following table lists optional attributes supported in BizLibrary. You may choose to include any of these attributes for synchronization with the BizLibrary LMS. To add an attribute,
   • Click Add New Mapping
   • Set Mapping Type=Direct, Source attribute=<any of Microsoft Entra ID Attribute>, Target attribute=<corresponding customappsso Attribute>,
   • Click OK.

Test User Provisioning

You can skip this section if you use only the group provisioning.

1. On the Entra console, go to your application > Users and Groups.
2. Make sure you have at least one user listed for testing. Otherwise, click +Add user/group > click None Selected > Select one user> click Assign.
3. From your application’s top page, click Provision on demand.
4. Next to Select a user or group, search a user by name and click Provision, and see if it succeeds. Otherwise, contact BizLibrary for troubleshooting.

Test Group Provisioning

If you don’t use Group Provisioning, skip this section.

1. On the Entra console, go to your application > Users and Groups.
2. Make sure you have at least one group listed for testing. Otherwise, click +Add user/group > click None Selected > Select one or more groups > click Assign.
3. From your application’s top page, click Provision on demand.
4. Next to Select a user or group, search a group by name and click Provision, and see if the group provisioning succeeds. Otherwise, contact BizLibrary for troubleshooting.

Enable Automated Provisioning

1. On the Entra console, go to your application > Provisioning > Provisioning
2. Under Provisioning Status, click On and click Save.
3. Click Overview.
4. Check Start provisioning.
5. Click Provisioning logs and see the group and users are provisioned. Otherwise, contact BizLibrary for troubleshooting.
6. Click Overview to check the provisioning interval (e.g. 40 minutes).

Help

If the expected updates do not appear during the provisioning interval, please reach out to your internal IT department or BizLibrary Support at support@bizlibrary.com or 888-315-8707.