How to set up the manager attribute for the Escalation Feature when using SCIM provisioning?

Below you will find the steps to import the manager of your users into the SoSafe Manager. This can be done via SCIM provisioning.

Be aware: The manager needs to be member of the SoSafe user list.

When using SCIM user provisioning

1. Open Entra ID in your Microsoft Azure tenant.

2. Go to Enterprise Application and select the SoSafe App

3. Select Provisioning on the left hand side

4. Click on Edit attribute mappings

5. Expand the Mappings an click on Provision Azure Active Directory Users

6. Below the attribute list click on Add New Mapping

7. Select “manager” as Source attribute and enter “urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager” as Target attribute
   The other fields retain with the default values.
   

   

   
   NOTE: If you do not have the target attibute available, continue here.
   

8. Click on OK to get back to the attribute list. You should see the new mapping now. Do not forget to click on Save to save all changes.
   

   

9. To test the setup do a Provision on Demand for a specific user object. Once it finish check if the manager attribute is being provisioned and appear in the SoSafe Manager. The email address should appear the SoSafe Manager in the User Management > Users in column Responsible person email

Missing the target attribute “urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager” in the SoSafe App

If you are missing the target attribute you need to add it to the SoSafe App. Here you have 2 options which target attribute type should be used.

Option 1: You use the manager attribute which is available in Entra ID => target attribute type is Reference

Option 2: You use another attribute where the managers email address is maintained => target attribute type is String

1. Under the Attribute List click on Show advanced options. There you will find Edit attribute List for SoSafe
   

   

2. If you are missing the link Edit attribute List for SoSafe please click on the link below to enable it:
   https://portal.azure.com/?Microsoft_AAD_Connect_Provisioning_forceSchemaEditorEnabled=true
   
   Once the link is clicked you need to stay in the same browser window and navigate back to the SoSafe App and the attribute list.

3. After you opened the attribute list of the SoSafe App please create the following new attribute:

   1. Option 1 - Reference attribute:
      

      

      NOTE: The reference attribute needs to refer to the user attribute (urn:ietf:params:scim:schemas:extension:enterprise:2.0:User), which you can select from the drop down in the last column

   2. Option 2 - String attribute
      

      

4. Once you added the new attribute click on Save to save the changes:
   

   

5. Now you can continue with Step 7 from the above instruction.