Configuring SCIM for Azure

This guide will walk through how Enterprise users can set up a SCIM connection with Vimeo for their organization using Azure as their IdP (Identity Provider).

If you’re an existing Vimeo Enterprise customer and don’t have SCIM, please contact your Account Manager for more information. If you are not a Vimeo Enterprise customer yet and are interested in SCIM, please contact us.  

In this article:

• Preparing the Vimeo API application
• Configuring the Azure app
• Provisioning users from Azure to Vimeo
• Troubleshooting and Tips

Preparing Vimeo API application

1. Open https://developer.vimeo.com
2. Login as a team owner.
3. Select “Get started” or “New app”.
4. Fill out the form, then select “Create App”
5. Scroll down to “Generate an access token” section
6. Select “Authenticated (you)”
7. Select Private, then Scim scopes
8. Press Generate button
9. Copy/save newly generated token somewhere, such as a note-taking application.

Configuring the Azure App

1. Go to your existing Vimeo application that is used for Vimeo.
2. Go to Provisioning -> Update credentials -> Open “admin credentials”
3. Set tenant URL as https://api.vimeo.com/scim/v2/{vimeo_user_id} where user id is Vimeo user id (see Prerequisites).
4. Set secret token from the section above (Preparing Vimeo API application).
5. Select Test Connection
6. Save configuration
7. Open Mappings

8. Go to Provision Azure Active Directory Groups

9. Set up like on the screenshot below and Save

Provisioning users from Azure to Vimeo

The initial step for starting provisioning in Azure is the “Start provisioning” button in the Azure Enterprise application. 

After that, every user you assign to the application will be provisioned into Vimeo.

After provisioning is initiated you can find out that your team owner account now has team members. 

Troubleshooting and Tips

When you change some user, keep UserName and Email attributes identical. Currently, Vimeo does support next user attributes. Vimeo supports the below user attributes:

• schemas (readonly, required by SCIM specification)
• id (readonly, required by SCIM specification)
• userName (mutable, requires same value for email)
• Name (mutable)
• name.formatted (same as givenName+familyName)
• name.givenName
• name.familyName
• displayName (same as givenName+familyName)
• Active (mutable)
• emails (only type=work and primary=true) (mutable)
• profileUrl (readonly)
• locale (mutable)
• groups (readonly, mutable from /Groups endpoint)
• meta (readonly)

Please contact [e-mail] if you have any issues.