{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41247,"path":"platform-security/identity/provisioning-user-oauth.md","title":"Provisioning user using OAuth","bundle":null,"doc_type":null,"release":"australia","body":"\n# Provisioning user using OAuth\n\nConfigure the provider for SCIM automatically provisions and de-provisioning of users and groups to ServiceNow by using the providers provisioning service with OAuth.\n\n## Before you begin\n\nRole required: scim\\_admin\n\n**Warning:** Grant this role carefully. The scim\\_admin role is equivalent to giving the user the admin role, where the scmin\\_admin can add or update Personally Identifiable Information \\(PII\\).\n\nYou must activate the SCIM plugin.\n\n## Procedure\n\n1.  Navigate to **All** > **System OAuth** > **Application Registry**.\n\n2.  In the Application Registries page, click the **SCIM API** record.\n\n3.  Verify the **SCIM API** record details.\n\n    These details should be provided while configuring the ServiceNow application on Azure AD.\n\n4.  Navigate to **All** > **System Web Services** > **REST API Access Policies** to check the details on the REST API Access Policies.\n\n5.  In the API Access Policy page, click the **SCIM API Policy** record.\n\n6.  Verify the **SCIMAPIOAuthOnly** record is available in the Authentication Profiles sections.\n\n7.  Check if the **OAuth Entity** field is specified with **SCIM API** record that was earlier configured or verified as application registry.\n\n8.  Create the required configurations at the provider's end.\n\n9.  Test the connection to ensure that the provider can connect to ServiceNow.\n\n    **Note:** If the connection fails, ensure that your ServiceNow account has admin permissions and try again.\n\n\n"}}