disabled
Back To Udemy

Sign in
English (US) Deutsch Español Français (France) 日本語 한국어 Português 简体中文
  • Sign in
  • English (US) Deutsch Español Français (France) 日本語 한국어 Português 简体中文
Search for solutions
Student Topics
Instructor Topics
Udemy Business Topics
Read article
Combined Results
Do these help?
What's this?
Udemy Business
If you need assistance, please reach out to {{HREF}}
See all {{COUNT}} articles
  1. Udemy Business
  2. Managing Users
  3. System for Cross-domain Identity Management (SCIM) Provisioning

Configure SCIM Provisioning With Azure Active Directory (AD)

Once Single Sign-on (SSO) is set up you can configure Udemy for Cross-domain Identity Management (SCIM 2.0) provisioning in Azure Active Directory (AD) with Udemy Business. This will allow you to provision, deprovision, create groups, manage group membership and change user profile details like name and email address in Azure AD, which automatically updates Udemy Business. You will no longer need to update both Azure AD and Udemy Business separately with these actions as it will all be synced from Azure AD.

To enable SCIM Provisioning for your Udemy Business account, first go to your Udemy Business account and access Manage > Settings > Provisioning (SCIM).

Click Start Setup and follow the instructions to enable SCIM and generate the Secret Token (Bearer token) which you then need to put into Azure AD.

Notes:

  • SSO must be enabled prior to activating SCIM
  • Single sign-on and provisioning are available to Udemy Business Enterprise Plan customers.
  • Users provisioned through Azure AD will not take up a license until they log into the Udemy Business application for the first time. 
  • SCIM provisioning changes can only be synced from Azure AD to Udemy Business, not the other way round. 
  • Users and Groups managed by SCIM in Azure AD cannot be changed within the Udemy Business app - SCIM is the single source of truth for user and group data.
  • You can still create groups manually in Udemy Business if you have users that you don’t need or want to push from Azure AD, eg. contractors or temporary staff.

Configure SCIM Provisioning with Azure AD

1. To enable SCIM Provisioning for Udemy Business, first go to your Udemy Business account and access Manage > Settings > Provisioning (SCIM).

2. Click Start Setup, choose your Identity Provider and follow the instructions to generate the Secret Token (Bearer token) which you then need to input into Azure AD.

1a.png

3. Next, access your Azure AD account and go to your Udemy Business SSO app and follow the steps below to get set up. You can also refer to Microsoft’s own configuration guide for SCIM Provisioning with Azure AD for further guidance.

Go to the Provisioning tab in your Azure portal.   

(Note: udemyazure is a test name we used in the screenshots below for the purpose of illustrating how to configure SCIM; you should locate the app that was named by your team when configuring within your own instance) 

1b.png

4. Choose Automatic as the Provisioning Mode.

1c.png

5. In the Admin Credentials section:

Tenant URL is: https://yourdomain.udemy.com/scim/v2 (yourdomain is the url for your Udemy Business account)

Secret Token: This is a ‘Bearer’ token that you can generate or view inside your Udemy Business account. (go to Manage > Settings > User Access to get the Secret Token)

6. Click Test Connection to check that it’s working correctly.  

Optional: You can enter an email address if you wish to receive alerts from Azure about errors.

1d.png

7. In Mappings:

Check the attribute mapping:

1e.png

Attribute_mapping.jpg

Confirm that the user's email is mapped to emails[type eq "work"].value

Edit_attribute.jpg

Confirm the attribute Switch([IsSoftDeleted], , "False", "True", "True", "False") is active which allows the deactivation of users to be passed over.

mapping_type.jpg

8. In Settings: 

Toggle the Provisioning Status button to On.

1h.png

 

9. Choose the Scope of how you want to sync your users and groups.

1i.png

You can sync only users and groups who are assigned the Udemy Business app if you need to restrict access to certain employees or departments. Or, you can sync all users and groups if every employee is going to have access.

1j.png

In order to provision more users and groups with Udemy Business access:

10. Click Users and groups

1k.png

11. Click on Add User (which will give you the option to add both Users and Groups)

Select all users or the groups you want to add to the application and click Select.

1l.png

Troubleshooting

In relation to Mappings:

1m.png

If you experience this error when provisioning:

{"schemas":["urn:ietf:params:scim:api:messages:2.0:Error"],"status":400,"detail":"{'emails': ['This field is required.']}"}

You should change the mapping of the User.

1n-1.png

emails[type eq "work"].value needs to be mapped to userPrincipalName that is, if userPrincipalName is where the email is.

If you go to the user profile, you should be able to see which field contains the email there.

1o.png

Was this article helpful?
0 out of 1 found this helpful

Related articles

  • How to Configure SSO in Azure AD for Udemy Business
  • Automating User and Group Management With SCIM
  • Udemy Business LMS And LXP Integration Partners
  • Udemy Business LMS Integration: SuccessFactors
  • Udemy Business API Reference
Contact Us

Related articles

  • How to Configure SSO in Azure AD for Udemy Business
  • Automating User and Group Management With SCIM
  • Udemy Business LMS And LXP Integration Partners
  • Udemy Business LMS Integration: SuccessFactors
  • Udemy Business API Reference

Need Help?

Contact Us
'scim','Azure Active Directory','Configure SCIM Provisioning With Azure Active Directory',
English (US) Deutsch Español Français (France) 日本語 한국어 Português 简体中文
  • Udemy.com
  • About us
  • Events
  • News
  • Investor Relations
  • Careers
  • Terms & conditions
  • Privacy policy
  • Sitemap
  • Accessibility statement
Udemy
© 2022 Udemy, Inc.
true