WATS Provisioning (SCIM) Additional Attributes

From WATS Cloud version 2025.1.10, our SCIM implementation will now support additional attributes that allows for more automation when it comes to managing your users. 

This document assumes you have already created a SCIM implementation, either by using the WATS Enterprise Application or created your own Enterprise Application for provisioning.

Adding attributes

• Log in to the Azure Portal
• Navigate to your Entra ID tenant
• Find your Enterprise Application
• Open the provisioning tab
• Open the provisioning tab again, then click "Provision Azure Active Directory Users" under the Mappings menu
  
• At the bottom, check the "show advanced options" checkbox, then click "Edit attribute list for WATS"
  
• Add the attribute names you wish to set up for (the entire key, not just the readable name)
  
• Click save when all wanted attributes have been added
• Now click the "Add New Mapping" link
• Fill out the boxes with information to fill your needs. The following image shows one example of how you can configure the mapping
  
  Hint: Use the "expression builder" to test the output of your expression for various user objects
• Click "Ok"
• When all wanted attributes have been added, click "Save"
  
  

Supported Additional Attributes

Levels

To add level restriction to your provisioning job, navigate to the attribute mappings list (see adding attributes)

Add a new attribute named "urn:ietf:params:scim:schemas:extension:custom:2.0:user:levels"

The mapping has to follow the following

• Has to be in a string format
• Can have multiple values, seperated by ";"
• Level need to exist in WATS
• Supports being added on user creation and update
  • If user is updated, will only add levels to user. To remove, use the WATS Control Panel

The following Entra ID example will take the country assigned to the user in Entra ID, match it to pre-defined strings then join them with the separator ';' if more than one is found. This can be expanded to fit your need by adding more IIF statements. 

Join(";", IIF([country]="usa", "Production", ""), IIF([country]="norway", "Development", ""))

Product Groups

To add product group restriction to your provisioning job, navigate to the attribute mappings page (see adding attributes)

Add a new attribute named "urn:ietf:params:scim:schemas:extension:custom:2.0:user:productGroups"

The mapping has to follow the following

• Has to be in a string format
• Can have multiple values, seperated by ";"
• Product group need to exist in WATS
• Supports being added on user creation and update
  • If user is updated, will only add product groups to user. To remove, use the WATS Control Panel

The following Entra ID example will match the city assigned to the user in Entra ID to pre-defined strings and join the results with the separator ';'. This can be expanded to fit your need by adding more IIF statements. 

Join(";", IIF([city]="Oslo", "Production", ""), IIF([city]="Drammen", "Development", ""))