Configure SCIM provisioning for GoLinks Microsoft Entra ID

Setting up SCIM provisioning with Microsoft Entra ID ensures your GoLinks user management is automated, accurate, and secure. By centralizing account creation, profile updates, deactivation, and reactivation in your identity provider, you eliminate manual admin work, reduce onboarding and offboarding friction, and prevent access drift. This helps keep your GoLinks workspace compliant and up to date, ensures the right people have the right access at the right time, and scales cleanly as your team grows—without relying on one-off scripts or ad-hoc processes.

Why Use SCIM? 

• New users created through Microsoft Entra ID will also be created in GoLinks.
• Updates made to the user’s profile through Microsoft Entra ID  will be pushed to GoLinks.
• Deactivating the user through Microsoft Entra ID  will deactivate the user in GoLinks.
• Reactivating the user through Microsoft Entra ID will reactivate the user in GoLinks.

Note: Deactivating a user will not delete their GoLinks account, but set them to inactive. Reactivating a user will set them to active.

Instructions

Requirements 

Before you configure provisioning with Microsoft Entra ID, make sure you have configured SAML 2.0 for GoLinks as outlined in this SSO integration guide. 

After setting this up, an admin on your GoLinks instance can generate a new token.

Generating a token

1. From your GoSearch dashboard, navigate to Settings in the left-hand menu.
2. Then go to Workspace and click on the SCIM tab. 
3. From here, you can see all the tokens that have been generated for your workspace, who generated them, and when they were generated.
4. You can also revoke an outdated tokens, but do so with caution. 
5. Click “Generate new token” and store your SCIM token for a later step.

API Integration

1. Sign in to the Microsoft Entra ID portal, select Enterprise applications and select All applications.
2. Select the GoLinks application in the applications list.
3. Go to the Provisioning tab and click Get started.
4. In the Provisioning Mode menu, set the value to Automatic.
5. In the Admin Credentials section, in the Tenant URL field, enter <https://api.golinks.io/scim/v2> and for the Secret Token field, enter the SCIM token you generated earlier. 
6. Click Test Connection to verify the credentials. If everything looks good, click on the Save button to save the provisioning configuration.
7. Optionally, under the Settings section, you will see the Notification Email field where you can enter the email address of a person or group who should receive the provisioning error notifications.

Provisioning Steps

1. Within the same Provisioning tab of the GoLinks application, open the Mappings section, and select Provision Microsoft Entra ID Users Directory Users.
2. In the Attribute Mappings section, you can review the user attributes that will be synced from Microsoft Entra ID to GoLinks. You do not have to do anything on this page as the mappings are already set up to sync with GoLinks.

Attribute	Type
userName	String
active	Boolean
emails[type eq “work”].value	String
name.givenName	String
name.familyName	String
externalId	String
urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department	String

3. To configure scoping filters, refer to the instructions provided in the Scoping filter tutorial. 
4. Within the Provisioning tab of the GoLinks application, you can enable Microsoft Entra ID provisioning service for GoLinks by changing the Provisioning Status to On.
5. Within the Settings section, modify Scope to select the users or groups that you would like to provision.
   • It’s recommended to select “Sync only assigned users and groups” to only sync users and groups assigned in the Users and groups tab.

6. When you are done and ready to provision, within the Provisioning tab of the GoLinks application, click Save.
   • This operation starts the initial synchronization of all users or groups defined in Scope in the Settings section. The initial sync takes longer to perform than subsequent syncs, which occur approximately every 40 minutes as long as the Microsoft Entra ID provisioning service is running.

Assign the Application to Users/Groups

1. If you choose “Sync only assigned users and groups”, navigate to the Users and groups tab and assign the users/groups you wish to provision.
2. You can confirm a user was assigned the GoLinks application by checking that their Display Name is displayed in the Users and groups tab. 
3. You can also confirm the user was assigned to GoLinks by checking your GoLinks User Management page and searching for the new user.
   • Note: If you deactivate a user directly on GoLinks, the user will still be assigned to the GoLinks application in Microsoft Entra ID. It is recommended to use Microsoft Entra ID to update and deprovision users from GoLinks.  

Monitor your deployment

Once you’ve configured provisioning, use the following resources to monitor your deployment:

• Provisioning logs can determine which users have been successfully provisioned.
• Use the Progress bar to see the status of the provisioning cycle and how close it is to completion.
• If the provisioning configuration seems to be in an unhealthy state, the application will go into quarantine status. 

User Attributes 

The following attributes are supported by GoLinks:

• Username: Username is set to the user’s primary email address. We recommend leaving this value as an email.
• Email: User’s primary work email address.
• Given Name: User’s first name.
• Family Name: User’s last name.
• Department: The department the user is associated with.

You should now be able to provision users of your GoLinks instance via SCIM through Microsoft Entra ID. If you need further assistance, please consult the GoLinks Help Center or Chat with Us.