Proxyclick Microsoft Entra ID User Provisioning Gallery App setup
What is 'Proxyclick'? Proxyclick is the former name of the Eptura Visitor product.
Set up Microsoft Entra user provisioning for Eptura Visitor
To set up Entra user provisioning for Eptura Visitor, you need access to the Microsoft Entra admin center and admin access to Eptura Visitor.
The following process explains how to set up user provisioning between Microsoft Entra ID and Eptura Visitor (Proxyclick). It covers adding and configuring the Proxyclick Enterprise application in the Microsoft Entra admin center, enabling the user provisioning integration, assigning users, and starting the provisioning cycle.
Step 1 - Microsoft Entra admin center - Add the Proxyclick Enterprise app from the App Gallery
- From the Microsoft Entra admin center, go to All services > Enterprise applications and click New application.
- Search for Proxyclick in the App Gallery, then select the app from the search results and click Create to create the Proxyclick application.
Step 2 - Eptura Visitor - Connect the Entra User Provisioning integration
- From Eptura Visitor, go to Settings > Integrations > SCIM User Provisioning and click Show integrations to expand the options.
- Scroll to Azure AD and click Connect. (Azure AD was the former name of Microsoft Entra ID).
- A Tenant URL and Secret Token are generated and shown on the Azure AD integration page. These values are used to enable the integration in the Microsoft Entra admin center in the next step.
Step 3 - Microsoft Entra admin center - Enable provisioning and enter admin credentials
- From the Proxyclick Enterprise application in the Microsoft Entra admin center, select Provisioning from the Manage menu, and click Connect your application.
- Under Admin Credentials, enter the Tenant URL and Secret token that were generated in Eptura Visitor in the previous step.
- Click Test Connection to verify that the integration can connect successfully. Then click Create to enable the integration.
Step 4 - Microsoft Entra admin center - Assign users to the Proxyclick Enterprise application
- From the Proxyclick Enterprise application in the Microsoft Entra admin center, select Users and groups from the Manage menu and click Add user/group.
- On the Add Assignment page, under Users, click None Selected to open the Users side panel.
- Add/select the users you want to provision and click Select.
- Back on the Add Assignment page, click Assign to assign the users to the Proxyclick Enterprise application.
There are many other ways to define which users are assigned to the application, and you can apply additional filters to further scope the assigned users. For more information, refer to the Microsoft page https://learn.microsoft.com/en-us/en...?pivots=portal
Step 5 - Microsoft Entra admin center - Start the automated user provisioning cycle
- From the Proxyclick Enterprise application in the Microsoft Entra admin center, click Start provisioning from the options across the top of the Overview page.
Microsoft Entra will attempt to create, update, or delete users automatically on a regular 40-minute cycle.
Attribute mapping
Attribute mappings determine how user attributes are synchronized between Microsoft Entra ID and Eptura Visitor.
The mappings are configured in the Proxyclick Enterprise application in the Microsoft Entra admin center. To view or modify attribute mappings, select Attribute mapping from the Manage menu.
The image shows the default preconfigured attribute mappings.
Multiple locations
If multiple locations are configured, Eptura Visitor can filter users based on an extended attribute so that users are only assigned to specific location(s).
The available attributes for this filtering are Language (preferredLanguage) and City (addresses[type eq "work"].locality).
Good to know
- Provisioning logs can be useful when troubleshooting issues. Information about the logs and how to retrieve them is available at Microsoft: https://learn.microsoft.com/en-us/az...e-apps-context
- User profile photos are not synchronized through user provisioning.
- Email addresses are used as the unique user identifier; therefore, email addresses cannot be updated through user provisioning.
- Provisioned users do not receive a Visitor invitation email. User provisioning is typically used alongside Single Sign-On (SSO), so invitation emails are generally not required.
- Existing user profiles are preserved. When a provisioned user already exists in Eptura Visitor, the synchronization process matches the existing profile using the email address as the unique identifier.
- Eptura Visitor user access rights are not assigned or managed through the provisioning process.