How synchronisation works
Microsoft Entra ID, previously Azure Active Directory or Azure AD, synchronises users with Sage Sales Management using the SCIM 2.0 protocol.
Synchronisation is one-way: changes flow from Microsoft Entra ID to Sage Sales Management. This connection does not update directory data from Sage Sales Management.
Depending on the configured actions, you can synchronise:
Creation: users within the synchronisation scope are created with basic permissions and the default group and environment.
Updates: changes to configured attributes, such as name, phone number, address, or manager, are transferred to Sage Sales Management.
Deactivation: when a user is deleted from the directory or unassigned from the application, they lose access to Sage Sales Management.
Deactivation retains the user’s data. If the user becomes active and falls within the synchronisation scope again, they can regain access and their data.
Requirements
You need:
A Microsoft Entra ID account with permission to create enterprise applications, assign users, and configure provisioning.
An existing company account in Sage Sales Management.
A Sage Sales Management user with permission to administer users in that account.
We also recommend configuring Microsoft Entra ID as an authentication provider to manage password and access policies through Microsoft.
User synchronisation and authentication are separate configurations. Enabling one does not automatically configure the other.
1. Check access and obtain the token
Open the user synchronisation portal.
Sign in with your Sage Sales Management credentials. Use your Microsoft credentials if Microsoft is configured as an authentication provider.
Check that you can access the credentials screen.
Copy the token shown under API Key. You will need it to configure the connection.
Accessing the portal confirms access to the credentials. You will test the Microsoft Entra ID connection later.
2. Create an enterprise application
Open the Microsoft Entra admin centre.
Go to Entra ID > Enterprise apps.
Select New application, then Create your own application.
Enter a name. We recommend “Sage Sales Management SCIM User sync”.
Select the option to integrate an application that is not in the gallery.
Create the application.
3. Configure the connection
Open the application’s Provisioning section.
Set the provisioning mode to Automatic.
Under the admin credentials, enter:
Tenant URL:
https://be-pro.forcemanager.net/scim/Secret token: the token obtained from the synchronisation portal.
Select Test Connection.
If the test succeeds, save your changes.
Selecting automatic mode lets you configure the service. Check and enable its execution after verifying synchronisation.
4. Define actions and attributes
Under Mappings, open the user provisioning configuration.
Review the available actions: Create, Update, and Delete. Enable those required for your configuration.
To deactivate users while retaining their data, review updates and the mapping of the active attribute. Do not select only Delete, assuming it controls all deactivation scenarios.
Keep the standard mappings unless you need to adapt specific directory attributes.
The primary email address must match in both systems to identify the same user correctly.
5. Select which users to synchronise
Define the provisioning scope:
Only users and groups assigned to the application.
All users included in the scope defined in Microsoft Entra ID.
If you use assignments, configure the relevant users or groups under Users and groups.
The provisioning scope determines which users are synchronised. Sign-in access depends on the application’s authentication and assignment settings.
6. Test and enable synchronisation
Select Provision on demand.
Find a test user within the scope.
Run provisioning.
Check the result in Sage Sales Management and review the user’s details and settings.
Verify the actions you have enabled.
Enable automatic provisioning.
Review the provisioning logs for errors.