Sync Entra ID Departments To Clearooms Teams
Follow these steps if the department target attribute is greyed out or missing when you set up SCIM provisioning from Microsoft Entra ID (Azure AD).
Before you start
-
SCIM is already connected: the Tenant URL and secret token from the Clearooms portal are saved and Test Connection succeeds.
-
You are signed in to Entra as an Application Administrator or Cloud Application Administrator (or higher).
-
The users you want to sync have a Department value in Entra.
Why is it greyed out?
Entra only offers target attributes that exist in the application's SCIM schema. Department belongs to the
standard SCIM enterprise user extension, which Entra does not list for a custom application by default.
Clearooms supports it, so you only need to add it to the list once.
The attribute to use
Attribute name (copy exactly, it is case-sensitive):
urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department
Type: String
Part 1: Add the attribute to the schema
-
Open the attribute mappings
In the Entra admin center go to Enterprise applications, open your Clearooms app, then Provisioning and expand Mappings (or choose Attribute mapping in the left menu).
Select Provision Microsoft Entra ID Users. Do not use the Groups mapping: it only offers displayName, externalId and members, so department can never be selected there. Check that the page shows Source Object: User.
-
Show advanced options
Scroll to the bottom of the Attribute Mapping page and tick Show advanced options.
-
Edit the attribute list
Click Edit attribute list for customappsso.
-
Add the department attribute
In the empty row at the bottom of the list, enter:
• Name: urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department
• Type: String
Leave Required and all other boxes unticked.
-
Save: Click Save, then confirm any prompt. The attribute now exists in the schema.
Part 2: Map Entra department to it
-
Add a new mapping
Back on the Attribute Mapping page, click Add New Mapping.
|
Mapping type |
Direct |
|
Source attribute |
department |
|
Target attribute |
The URN you just added (Now in the dropdown) |
|
Match objects using this attribute |
No |
|
Apply this mapping |
Always |
What the finished mapping should look like:
Save the mapping
Click OK, then Save at the top of the Attribute Mapping page.
Part 3: Test and turn on
-
Test with one user
Go to Provisioning > Provision on demand, choose a user who has a department set in Entra, and click Provision. Then check in Clearooms that the user has been added to a team named after their department. -
Start provisioning
Once the test works, go to the provisioning overview and click Start provisioning (or Restart provisioning if it was already running, which forces a full re-sync so existing users pick up their department).
Troubleshooting
|
Target attribute list is empty or only shows group fields |
You are on the Groups mapping. Go back and open Provision Microsoft Entra ID Users instead. |
|
Attribute not in the dropdown |
Save the schema change in Part 1 first, then reload the page and add the mapping again. |
|
No "Edit attribute list" link |
Check that Show advanced options is ticked and that you hold an admin role listed above. |
|
Team not created |
Confirm the URN has no typos or spaces, the source value is not blank, and the user was included in the sync scope. |
|
Existing users unchanged |
Use Restart provisioning to force a full sync, or wait for the next cycle (about 40 minutes). |
|
Anything else |
Check Provisioning logs in Entra for the user, and send us the error text. |
Need a hand?
Contact the Clearooms support team and include a screenshot of your attribute mapping page and the relevant Provisioning log entry.