Microsoft Entra ID (Azure AD) integration
Partly. Microsoft Entra ID can sign people in to Personal Academy over OIDC or SAML, and can create, update and deactivate users through the SCIM 2.0 Users endpoint. Both are included from the Basic plan. Entra ID has not been tested end to end, and SCIM lacks the discovery endpoints and Group changes the stock Entra provisioning app may expect, so test with a few users first.
See pricing (from $1 per active user)
Included from the Basic plan, $1 per active user per month.
At a glance
Register Personal Academy as an enterprise application in Entra ID for sign-in, and configure provisioning with the Personal Academy SCIM base URL and a bearer token.
| Status | Built, not yet verified |
|---|---|
| Included from | Basic plan (SSO and SCIM) |
| Authentication | OIDC or SAML 2.0 for sign-in; SCIM bearer token for provisioning |
| Data that flows | In: sign-in claims; SCIM user create, update and deactivate. Out: nothing |
| Not yet | An end-to-end Entra ID test; SCIM discovery endpoints and Group PATCH; role mapping from groups |
How to set it up
- Register an enterprise application in Entra ID and copy its sign-in details.
- Open SSO in the Personal Academy admin area, enter those details and save.
- Create a SCIM token in Personal Academy and add it to the application's provisioning settings with the SCIM base URL.
- Provision one test user and confirm the account appears in Personal Academy.
Highlights
- OIDC or SAML sign-in with Microsoft work accounts
- SCIM 2.0 user provisioning and deprovisioning
- Included from the lowest paid plan
Technical overview
Authentication:SAML 2.0 or OIDC; SCIM 2.0 bearer token
Setup Time:~20 minutes
Prerequisites:
- •Entra ID rights to register enterprise applications.
- •The Basic plan or above.