Important

You are browsing upcoming documentation for version 7.0 of OroCommerce, scheduled for release in 2026. Read the documentation for the latest LTS version to get up-to-date information.

See our Release Process documentation for more information on the currently supported and upcoming releases.

Configure User Settings per Organization 

Note

You can configure SCIM synchronization globally or per organization.

Note

The SCIM synchronization is only available in the Enterprise edition.

The User Settings section enables you to configure the SCIM (System for Cross-domain Identity Management) protocol in the Oro application. This setup allows you to import and synchronize users from external identity systems, such as Microsoft Entra ID, into Oro. Once imported, these users can log in to Oro via Microsoft 365 Single Sign-On.

To set the user provisioning settings per specific organization:

  1. Navigate to System > Configuration > User Management > Organizations in the main menu.

  2. For the necessary organization, click the More Options menu at the end of the row, and then click the Configure icon to start editing the configuration.

  3. Select System Configuration > General Setup > User Settings in the menu to the left.

    Note

    For faster navigation between the configuration menu sections, use Quick Search.

    User settings on organization level

  4. Under User Provisioning, set the following options:

  • Enable SCIM — Enable or disable the SCIM integration on the global level.

  • Default Access to Organization Business Units — Select the organizations and business units that will be automatically assigned to newly synchronized users.

  • Default Roles — Select the user roles that new users will receive upon synchronization.

  • Empty name values handling — Choose how the system should handle cases when the identity provider does not send first or last name values. The available options are:

    • Leave as is and expect validation errors — If selected, and the identity provider sends no first or last name to Oro, the system will return an exception without generating any replacement values.

    • Generate based on user name (default) — If selected, the first and last name values will be copied from the username field.

    • Use random string — If selected, the first and last name values will be automatically generated as random strings.

  1. Click Save settings to apply the changes.

  2. Once enabled, you can configure Microsoft Entra provisioning service, following the steps described in the related documentation.